Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

How One Kubernetes YAML Can Hand Over a GCP Organization

How One Kubernetes YAML Can Hand Over a GCP Organization

BleepingComputer

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Arista patches actively exploited VeloCloud Orchestrator zero-day

BleepingComputer

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Microsoft: September Windows updates break Always On VPN connections

Microsoft: September Windows updates break Always On VPN connections

BleepingComputer

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Ryuk ransomware member sentenced to 24 months in prison

Ryuk ransomware member sentenced to 24 months in prison

BleepingComputer

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

BleepingComputer

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

Rogue external MFA providers can steal passwords during logins

Rogue external MFA providers can steal passwords during logins

BleepingComputer

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

BleepingComputer

Chinese hackers exploit multiple technologies to steal govt data

Chinese hackers exploit multiple technologies to steal govt data

BleepingComputer

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

BleepingComputer

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

New ClosedQuorum Windows malware uses AI for attack decisions

New ClosedQuorum Windows malware uses AI for attack decisions

BleepingComputer

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Reducing shadow IT visibility gaps with Wazuh

Reducing shadow IT visibility gaps with Wazuh

BleepingComputer

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises