Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Authorities disrupt nearly 11,000 cybercrime networks in Africa

BleepingComputer

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

China-Linked Hackers Use ARTEX AI Agents to Abuse ConnectWise Supply Chain Attack

China-Linked Hackers Use ARTEX AI Agents to Abuse ConnectWise Supply Chain Attack

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

BleepingComputer

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

BleepingComputer

Lazarus hackers use post-quantum cryptography for malware delivery

Lazarus hackers use post-quantum cryptography for malware delivery

BleepingComputer

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

BleepingComputer

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI agents disabled safety monitoring, one lied about it

OpenAI agents disabled safety monitoring, one lied about it

BleepingComputer

PHP ships emergency patches for critical PHP2Shell flaws

PHP ships emergency patches for critical PHP2Shell flaws

BleepingComputer

ClickFix has never been bigger, and AI tools are its most convincing lure yet

ClickFix has never been bigger, and AI tools are its most convincing lure yet

BleepingComputer

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

BleepingComputer

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

The Harness Is the Hard Part of Agentic Pentesting

The Harness Is the Hard Part of Agentic Pentesting

Microsoft says October updates didn’t actually fix VPN issues

Microsoft says October updates didn’t actually fix VPN issues

BleepingComputer

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

BleepingComputer