Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

Gyazo server flaw exploited to steal 23.6 million user records

Gyazo server flaw exploited to steal 23.6 million user records

BleepingComputer

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

BleepingComputer

Secure enterprise sharing with access reviews for Microsoft 365

Secure enterprise sharing with access reviews for Microsoft 365

BleepingComputer

Microsoft Teams will let admins block custom file extensions

Microsoft Teams will let admins block custom file extensions

BleepingComputer

Webinar: Which Google Workspace security controls actually matter?

Webinar: Which Google Workspace security controls actually matter?

BleepingComputer

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts

Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts

BleepingComputer

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

New Check Point flaw lets hackers execute code with root privileges

New Check Point flaw lets hackers execute code with root privileges

BleepingComputer

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Microsoft fixes broken copy and paste for Excel 2016 users

Microsoft fixes broken copy and paste for Excel 2016 users

BleepingComputer

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

New RatHat Android malware uses AI to automate device control

New RatHat Android malware uses AI to automate device control

BleepingComputer

OpenAI details more cases of AI agents taking unauthorized actions

OpenAI details more cases of AI agents taking unauthorized actions

BleepingComputer

Critical Check Point Management Server Flaw Lets Unauthenticated Attackers Run Code as Root

Critical Check Point Management Server Flaw Lets Unauthenticated Attackers Run Code as Root

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo supply-chain attack injected ClickFix scripts on customer sites

BleepingComputer

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files