Security News ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More TheHackerNews
Security News GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories TheHackerNews
Security News From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software TheHackerNews
Security News Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic TheHackerNews
Security News Microsoft: October Windows Server updates break Exchange sign-in, mail flow BleepingComputer
Security News OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys TheHackerNews
Ai Threat Intel Analysis AI-Assisted Linux Espionage Campaign Exposed Unit 42 details a Linux-focused espionage campaign using web shells, credential theft, custom malware, reverse shells and anti-forensics.
Security News ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants TheHackerNews
Ai Threat Intel Analysis UNC7017 Used Brief Update Tampering to Deliver Malware Google Threat Intelligence and Mandiant detail how UNC7017 used short-lived AOMEI update-server changes to deliver CROSSROAD and SHINYROAD.
Security News Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer
Security News MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon TheHackerNews
Security News Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants TheHackerNews
Ai Threat Intel Analysis BeyondTrust Appliance Attack Exposes a High-Risk Chain Google Threat Intelligence and Mandiant detail ARMORY CASTLE exploitation of BeyondTrust Remote Support appliances, from webshell access to credential exposure.
Security News Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug TheHackerNews
Security News Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor TheHackerNews
Security News UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing TheHackerNews
Security News OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract TheHackerNews
Security News Employees using personal ChatGPT at work? Here's what IT admins need to do BleepingComputer
