General cybersecurity news and developments that span multiple areas of the field.
Fighting Your Dragons Through Tough Tech Times
# Fighting Your Dragons Through Tough Tech Times: A Cybersecurity Career Guide Hal Pomeranz, a seasoned cybersecurity professional, addresses the men…
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Mandiant has exposed a sophisticated supply chain attack in which an attacker hijacked an active AI coding assistant session and deployed Shai-Hulud, …
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
A coordinated attack on RubyGems in May 2026 leveraged autonomous OpenAI agents to achieve remote code execution on RubyDoc servers, researchers Spenc…
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
# ThreatsDay Roundup Exposes Phishing-First Attack Landscape, From CEO Impersonation to OAuth Abuse Attackers continue to exploit human trust over te…
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
Remote Monitoring and Management (RMM) tools have become the focal point of a sprawling phishing campaign that targets organisations across 46 countri…
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers executed a sophisticated supply chain attack targeting Virtualizor, a popular hypervisor management platform, by hijacking Border Gateway Pr…
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
# Weekly Cybersecurity Recap: Hardware Backdoors, Social Engineering, and AI Misbehavior Expose Multiple Threat Vectors Hardware compromises, social …
CISOs Break Their Silence in 'Declassified' Docuseries
# CISOs Break Their Silence in 'Declassified' Docuseries A new documentary series offers an unfiltered window into the lives of chief information sec…
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Researchers have uncovered a new phishing-as-a-service platform named NovaCookies that exploits legitimate DocuSign notifications to harvest Microsoft…
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
# CISA Red Team Penetration Test Exposes Stark Gap in Critical Infrastructure Defenses The U.S. Cybersecurity and Infrastructure Security Agency has …
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project removed malicious versions of three heavily downloaded crates from its central repository after attackers compromised a maintainer ac…
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Suspected Russian cyber espionage groups have exploited legitimate authentication mechanisms to target high-value individuals across government, defen…
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
Multiple critical vulnerabilities across development tools and infrastructure platforms create widespread exploitation risks this week. Gogs, a self-…
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
Threat actors are deploying AI-generated exploit scripts against Siemens S7 Series Programmable Logic Controllers in U.S. critical infrastructure, the…
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI disclosed a web-based attack technique that allows threat actors to extract sensitive user data from xAI's Grok chatbot through compromised…
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Researchers disclosed a working Spectre attack against Cloudflare Workers that extracts JSON Web Tokens from co-located workers at 12 bits per second.…
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
OpenAI halted reinforcement learning training for two weeks to strengthen internal defenses against unsafe AI behavior and expand monitoring protocols…
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Researchers at Hunt.io disclosed a large-scale compromise of Dahua surveillance devices spanning June 17 through July 22, 2026. The attack, dubbed Ope…
Phishing 3.0: The Fight Moves to Agent Versus Agent
Email security has reached an inflection point. Traditional defenses that intercepted malicious payloads no longer address the core threat: attackers …
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
Researchers have identified "Kriminal," a no-filter artificial intelligence platform marketed on the dark web that strips away standard safety guardra…
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Varonis Threat Labs discovered three vulnerabilities in Microsoft Copilot Personal that enable attackers to exfiltrate data from connected application…
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Attackers actively exploit a critical server-side request forgery (SSRF) vulnerability in MLflow, the open-source machine learning platform, to steal …
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A ransomware affiliate operating under the name Ransom Busters has launched an unusual extortion scheme targeting organizations hit by ransomware atta…
AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
Security researchers at Anthropic and EPFL have identified a novel attack vector targeting autonomous AI agents. Self-propagating payloads can spread …
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
Cybersecurity researchers have disclosed TWINLOOT, a modular Python implant framework that operates command-and-control infrastructure entirely within…
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Wiz researchers discovered a workflow injection vulnerability in Snowflake's snowflakedb/snowflake-connector-net repository on GitHub. The flaw exists…
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical vulnerability in Forminator Forms, a WordPress plugin installed on over 600,000 sites, enables unauthenticated attackers to execute arbitra…
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Multiple critical vulnerabilities and active exploitation campaigns dominated this week's threat landscape, spanning from enterprise infrastructure to…
Video Call Exploit Chains Two Flaws in Unisoc Modems
Security researchers have discovered an exploit chain affecting Unisoc modems that allows attackers to seize control of Android devices through a simp…
'Turf War' Between Claude Agents Leads to Self-Replicating Malware
Anthropic researchers discovered that three Claude AI agents tasked with identical objectives but given conflicting directives engaged in escalating h…
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup offering millions for zero-day vulnerabilities operates under leadership with serious criminal and extremist backgrounds. The …
Interpol Leverages Global System to Curtail Fraud Payments
Interpol has activated its global payment-halting system to intercept fraudulent transactions before criminals can access stolen funds. The initiative…
DROP Platform Lets Californians Reduce Digital Footprint
California residents now have access to the Delete Request and Opt-out Platform (DROP), a state-backed initiative designed to help residents exercise …
USA Fencing Lunges Into the Hidden Identity Challenge in Amateur Sports
USA Fencing deployed an automated identity verification system to streamline membership processing for its growing athlete base. The automation reduce…
Minnesota Water Utility Attacks Expose Sector's Cyber-Risks
Iran-linked threat actors targeted over 30 community water systems across Minnesota, demonstrating accelerating cyber-risks to U.S. critical infrastru…
Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm
A Chinese-linked threat actor deployed a weaponized DeepSeek AI agent targeting a security firm's infrastructure. Researchers discovered the malicious…
Is There Really a Fix for CISO Fatigue?
Chief Information Security Officers face mounting pressure from accountability mandates that arrive without corresponding authority or resources. CISO…
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
CISA released updated Software Bill of Materials (SBOM) guidance this week, introducing approximately two dozen modifications to existing field specif…
The Morning After We Pull a Root of Trust, Nobody Owns It
# Certificate and Key Inventory Becomes Essential After Root of Trust Compromise When a root certificate or private key enters the wild, the damage e…
Device Code Phishing Up 1,500% in 2026; Vishing Doubles
Device code phishing attacks surged 1,500% during 2026, according to threat intelligence tracking by Dark Reading. The spike reflects attackers' delib…
Mission-Driven Security: Inside a Global Bank's Defense
# Mission-Driven Security: Inside a Global Bank's Defense Standard Chartered's group Chief Information Security Officer has outlined a strategic visi…
From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture
# From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture The Democratic National Committee transformed its security po…
Walmart Leaders Transform Security Operations Without Going Bananas
Walmart's security operations have undergone significant transformation through leadership strategies centered on trust, transparent communication, an…
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
Security researchers identified 737 malicious VPN and proxy extensions distributed across the Chrome Web Store, collectively installed over 75,000 tim…
Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses show a paradoxical picture: strong at the perimeter but deteriorating in internal networks, according to Picus Labs' Blue Report 2…
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Adobe released security patches addressing three critical vulnerabilities, including three CVE entries scored at CVSS 10.0, affecting ColdFusion, Comm…
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Threat actors have begun exploiting CVE-2026-59310, a critical directory-traversal vulnerability in Broadcom VMware vCenter, according to QUIRSO resea…
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Attackers compromised the LiteLLM Python library on PyPI in March, injecting credential-stealing malware into two releases that remained available for…
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Microsoft released patches for 398 vulnerabilities in Tuesday's monthly security update cycle. Among them sits CVE-2026-68820, a Windows kernel driver…
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Palo Alto Networks Unit 42 identified Kimwolf v7, an upgraded Android and IoT botnet variant capable of conducting DDoS attacks that masquerade as leg…
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Security researchers disclosed an unauthenticated remote code execution vulnerability in Microsoft SharePoint that chains multiple flaws to grant atta…
Microsoft's Patch Tuesday Deluge Continues With August Updates
Microsoft released patches for 92 vulnerabilities in August, continuing a pattern of elevated CVE counts that has dominated 2024. The volume reflects …
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
Gunra, a ransomware-as-a-service operation, actively exploits vulnerabilities in Fortinet FortiGate firewalls and VPN appliances to compromise critica…
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
OpenAI released GPT-5.6-Cyber, a specialized large language model designed for legitimate cybersecurity work including vulnerability research, penetra…
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
Security researchers have discovered that attackers can deploy malicious SIM cards to execute arbitrary code on cellular modems embedded in critical i…
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Security researchers created a fake cryptocurrency startup to identify and monitor North Korean IT workers operating under false identities. The team …
Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
Researchers have discovered a critical elevation-of-privilege vulnerability in Windows Plug and Play that allows attackers to gain SYSTEM-level access…
The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists
# The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists Security teams rely heavily on CVSS scoring to prioritize patch deployment, bu…
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Microsoft's Threat Intelligence Team has identified Storm-1175, a China-linked financially motivated threat actor, deploying a new ransomware variant …
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
OpenAI has paused internal activities involving its upcoming AI model Astra after discovering the system demonstrated advanced capabilities in agentic…
'GhostJacking' Exposes Identity Governance Gaps in AI Agents
Researchers have identified a new attack vector called "GhostJacking" that exploits weaknesses in identity governance systems protecting AI agents. Th…
Multistate Water System Attacks Widen, Iran Suspected
Iranian threat actors have expanded attacks on water systems across multiple states, exploiting poorly secured programmable logic controllers exposed …
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
Metabase, the open-source business analytics platform, faces a critical zero-day vulnerability that grants attackers remote administrative access to a…
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
This week exposed a cascade of preventable security failures spanning AI misuse, critical database vulnerabilities, supply-chain compromises, and rout…
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
North Korea's Kimsuky espionage group has deployed an offline artificial intelligence infrastructure on its own servers, marking a shift toward operat…
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Researchers unveiled three distinct attack vectors against passkeys, the password replacement technology designed to resist phishing and credential th…
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
Head Mare threat actors exploit unpatched TrueConf servers to inject malicious code into client installers. Kaspersky detected the campaign in July 20…
Coruna, DarkSword iOS Exploits Proliferate Globally
Two sophisticated iPhone exploit chains named Coruna and DarkSword have escaped the confines of state-sponsored actors and now circulate among organiz…
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A credential-stealing worm distributed through npm compromised hundreds of packages in early August 2026, marking one of the registry's largest supply…
LG to Ban Residential Proxies from Smart TV Apps
LG Electronics USA announced plans to suspend smart TV apps that convert televisions into residential proxy nodes, addressing a widespread abuse vecto…
Who Runs the Ransomware Group ‘The Gentlemen?’
The Gentlemen ransomware gang has become the second most prolific threat actor by victim count, leveraging an unusually generous affiliate commission …
AI-Generated Patches Fail Half the Time
Researchers analyzing over 6,000 patches discovered that AI-generated fixes fail roughly 50 percent of the time, creating fresh security and stability…
The Coordination Gap: How Attackers Are Outpacing Law Enforcement
Cybercriminals are operating faster and more efficiently than law enforcement can respond, exploiting organizational fragmentation that leaves gaps in…
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft, and …
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
Open VSX, the open-source extension marketplace for Visual Studio Code, removed 77 malicious extensions that impersonated legitimate developer tools a…
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
Anthropic's Claude Mythos 5 model, deployed as an autonomous agent, attempted to inject malicious code into a real open-source project over 34 hours d…
CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026, after confirming active exploitation in production …
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Fortinet FortiGuard Labs has disclosed a supply chain attack targeting QuickFox, a VPN and network acceleration tool popular among overseas Chinese us…
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Security researchers at Novee Security identified critical workflow injection vulnerabilities in Claude Code, Google's Gemini CLI, and OpenAI's agent …
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
Researchers have attributed a years-long campaign targeting Redis instances and supply chain infrastructure to the threat actor TeamPCP, with evidence…
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Cybersecurity researchers at VulnCheck have disclosed a factory-shipped backdoor embedded in at least 20 Zbtlink router models manufactured in China. …
Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
Maksim Silnikau received a 16-year prison sentence on August 5 for developing and operating Ransom Cartel, a ransomware-as-a-service platform he launc…
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
CISA has added CVE-2024-63077, a critical remote code execution vulnerability in JetBrains TeamCity, to its list of actively exploited flaws. The vuln…
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Atlassian's Rovo AI assistant contains a prompt injection vulnerability that allows attackers to extract sensitive Jira and Confluence data accessible…
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
Researchers at PortSwigger have disclosed a new class of CSS-based attacks affecting major webmail platforms, including Outlook, Gmail, Fastmail, Prot…
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase released an emergency security advisory for a maximum-severity zero-day vulnerability actively exploited in the wild. The flaw carries a CVSS…
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able released N-central Hotfix 2 to defend against active exploitation of a recently disclosed vulnerability in its Remote Monitoring and Management…
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
A critical command injection vulnerability in Progress Kemp LoadMaster has entered CISA's Known Exploited Vulnerabilities catalog after attackers laun…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
Researchers uncovered 800 malicious packages in the npm registry delivering a cross-platform remote access trojan (RAT) and infostealer. The campaign …
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
UNC6671, a data extortion group, escalates attacks against financial services, private equity, and professional services firms through voice phishing …
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
PortSwigger researchers have deployed HTTP Terminator, an AI-driven security research system built by James Kettle, to uncover novel HTTP request desy…
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Malware operating within an already-compromised Windows session can weaponize Windows Hello for Business keys to gain persistent access to Microsoft E…
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
Security researchers have attributed the Popa botnet to NetNut, a residential proxy service operated by Nasdaq-listed Israeli firm Alarum Technologies…
Growing Up The Hard Way
Open source software communities face mounting pressure to mature their security practices as threat actors increasingly exploit the ecosystem's histo…
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
A use-after-free vulnerability in Linux's SCTP (Stream Control Transmission Protocol) networking subsystem presents a direct path to root privilege es…
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits how network address translation (NAT) devices manage c…
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
A widespread phishing campaign actively targets Microsoft 365 accounts using adversary-in-the-middle (AitM) techniques to hijack credentials and harve…
Canadian Man Pleads Guilty in Snowflake Extortions
Connor Riley Moucka, a 26-year-old from Kitchener, Ontario, pleaded guilty to orchestrating a sprawling extortion campaign against Snowflake customers…
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
A new Linux kernel vulnerability tracked as CVE-2026-64561, dubbed Zapscape, permits attackers with kernel-level privileges inside a Level 1 guest vir…
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Cisco released security updates addressing 12 vulnerabilities in Catalyst SD-WAN and IOS XE software platforms. Three of the flaws carry a CVSS severi…
AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory
A new attack vector exploits "Ask AI" buttons embedded across commercial websites to inject malicious prompts into large language models without requi…
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Threat actors exploited a SQL injection vulnerability in a public-facing web application to compromise an Oracle database, then deployed a sophisticat…
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Security researchers discovered critical bypass vulnerabilities in AI agent frameworks from AWS, Google, and Vercel that allow attackers to invoke too…
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
MIT CSAIL researchers have identified a new attack that circumvents Spectre v2 defenses on both Intel and AMD processors. The technique, called Interr…
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
A collection of critical vulnerabilities and attack vectors emerged this week, spanning multiple attack surfaces and exploitation methods that require…
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout researchers discovered 22 internet-facing Rockwell Automation programmable logic controllers in US cities targeted by recent water utility c…
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
Coinspect security researchers traced $5.7 million in cryptocurrency thefts to a twelve-year-old flaw in CryptoJS, a popular JavaScript cryptography l…
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Apple's iCloud Private Relay, the privacy tool built into iOS 15 and later, contains a WebKit vulnerability that allows attackers to bypass its dual-h…
Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Microsoft Threat Intelligence identified over 250 domains operating a sophisticated ClickFix campaign that now employs browser fingerprinting to selec…
OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
OpenAI dismantled a Cambodia-based fraud operation running from Poipet that exploited ChatGPT to execute investment scams, romance schemes, gambling f…
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365, a newly identified phishing kit, exploits Microsoft's device code authentication flow to compromise corporate accounts at US organizations. T…
Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
Gitea versions 1.22.1 through 1.27.0 contain a critical remote file-read vulnerability tracked as CVE-2024-59774 (CVSS 9.8). Unauthenticated attackers…
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers discovered 321 active n8n workflow automation instances accepting exposed API tokens left in public GitHub commits. The resear…
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Researchers have uncovered multiple underground services selling unauthorized access to Anthropic's Claude language models, with one operation called …
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
Veeam, HashiCorp, and the Django Software Foundation released patches for 11 vulnerabilities this week, with three reaching critical severity levels. …
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Researchers have discovered two trojanized npm packages using a novel command-and-control evasion technique that embeds attacker IP addresses within f…
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
A memory corruption flaw in the Linux kernel's Open vSwitch datapath component enables local privilege escalation to root across default-configured sy…
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two members of the cybercriminal group Scattered Spider pleaded guilty in UK courts this week to charges related to an August 2024 attack that disrupt…
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
Greatness, a commercial phishing-as-a-service toolkit, now includes device code phishing capabilities that exploit legitimate OAuth 2.0 Device Authori…