Security News Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild TheHackerNews
Security News Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up TheHackerNews
Security News CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories TheHackerNews
Ai Threat Intel Analysis Japanese Ransomware Activity: The Gentlemen and Qilin Cisco Talos examines ransomware activity affecting Japan, including The Gentlemen’s intrusion workflow and Qilin’s possible use of AI-assisted tooling.
Security News Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root TheHackerNews
Security News New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution TheHackerNews
Security News Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 TheHackerNews
Security News Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer BleepingComputer
Security News Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation TheHackerNews
Security News Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents TheHackerNews
Security News An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. TheHackerNews
Security News WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage TheHackerNews
Security News Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer TheHackerNews
Ai Threat Intel Analysis MovieReaper: How Torrent Files Hide a Modular Trojan Securelist details MovieReaper, a multi-stage Windows Trojan distributed through compromised torrent files and using Solana to conceal its C2.