NetmanageIT CTO Corner

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

Illustration of an enterprise PKI hierarchy with a compromised intermediate CA and emergency certificate replacement across web, API, VPN, container and mobile systems

Ai Threat Intel Analysis

eMudhra CA Key Compromise: PKI Risk and Response

The compromise of eight eMudhra intermediate CA private keys creates a certificate-trust emergency. Here is how organizations should assess exposure and respond.

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

BleepingComputer

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Illustration of PHP web servers being exploited and connected to an Active Directory environment

Ai Threat Intel Analysis

PHP2Shell: Critical PHP Flaws Put Web Servers at Risk

Unit 42 details two critical PHP RCE vulnerabilities, observed post-exploitation activity, exposure priorities and practical detection guidance.

Abandoned Popcorn Time app exposed millions of device to RCE attacks

Abandoned Popcorn Time app exposed millions of device to RCE attacks

BleepingComputer

Microsoft Teams to get AI-powered, context-aware phishing detection

Microsoft Teams to get AI-powered, context-aware phishing detection

BleepingComputer

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Microsoft: Windows Server 2016 reaches end of support in January

Microsoft: Windows Server 2016 reaches end of support in January

BleepingComputer

Quest Diagnostics confirms data breach exposed patient records

Quest Diagnostics confirms data breach exposed patient records

BleepingComputer

PHP shares mitigation for new RCE vulnerability with no patch

PHP shares mitigation for new RCE vulnerability with no patch

BleepingComputer

You gave your AI agent access, but who is giving it orders?

You gave your AI agent access, but who is giving it orders?

BleepingComputer

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

HPE patches eight max severity RCE and auth bypass AOS flaws

HPE patches eight max severity RCE and auth bypass AOS flaws

BleepingComputer

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data