3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using ...
general
20 articles
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said i...
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently droppin...
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromi...
Total AI awareness: Gaining full visibility of the AI attack surface
Why protecting AI piecemeal leads to coverage gaps and unnecessary risk.
AI has outpaced the patching clock – here’s what the industry needs to do
Five ways the industry can respond to the AI challenge.
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure d...
Pro-Ukraine Hacking Cat group deploying new malware against Russian targets
The pro-Ukraine hacktivist group Hacking Cat has evolved from carrying out website defacements and data leaks to more sophisticated and destructive attacks o...
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models.
Hundreds of fake government websites target users in Central Asia
The sites are designed to collect victims’ contact details, which scammers then use to target them through phone or email to steal money, personal informatio...
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update AP...
Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228
Synthetic 'digital Frankenstein' identities sold on dark web for $200
Researchers from Coveron and NordLayer Intelligence have observed a significant surge in the creation and sale of these synthetic identities on dark web foru...
Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens
Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service
Logitech Options+ vulnerability allows SYSTEM-level privilege escalation
The vulnerability was found in the software's updater service, which runs with extensive operating system access.
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job.
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI. The post Beijing Hits...
UK government rolls out passkeys to over 23 million users
The GOV.UK One Login system is now more widely adopting passkeys, following a successful trial with over 300,000 users.
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds
Cyber warfare market projected to double by 2031 amid rising threats
The projected surge is attributed to several factors, including escalating attacks on military networks and mission systems, forcing defense organizations to...