Latest news
-
Vulnerabilities via Ars Technica
PSA: Patch your Plex media server before someone hacks it
Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including cryptominers and…
-
Ransomware via Halcyon
The Fake Agent Was Just the Delivery Truck
A fake IT agent arrived signed and familiar. Its real job was to install a legitimate remote-support tool, the most common endgame in September’s ROC data.
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Froggys Fog
special-effects fog fluid manufacturer and distributor (order management and shipping operations) · Tennessee, USA | The complete shipping and order management database…
-
Threat Intel via Dark Reading
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
-
AI Security via Cloudflare
Cutting our inference bill by 68% by being obsessive about optimization
When we previously blogged about our AI code reviewer in April, an average review cost a palatable $1.19. By the end of August, that figure had shot up to about $2.46…
-
Threat Intel via BleepingComputer
Bullhorn takes staffing platform offline to contain cyberattack
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.
-
Threat Intel via The Record
Two more Serbian opposition figures targeted with spyware, researchers say
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in…
-
Vulnerabilities via Security Affairs
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make…
- Advertisement
-
Breaches via CyberScoop
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
Hundreds of federal agencies should adopt an encryption tool to protect whistleblowers, veterans suffering from mental health crises and others from hackers who might…
-
Vulnerabilities via SecurityWeek
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
-
AI Security via Cloudflare
Introducing Clairic, a new System One class of extraction models
Today, we're announcing a preview of a new class of System One-style models: extraction models. Our first one, Clairic, is available hosted on Workers AI as…
-
Vulnerabilities via The Hacker News
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a…
-
AI Security via BleepingComputer
OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
-
Vulnerabilities via Ubuntu Security
USN-8939-1: libXtst vulnerabilities
It was discovered that libXtst did not properly handle certain RECORD replies from the X server. A malicious X server could possibly use this issue to cause libXtst…
-
Breaches via ransomware.live
🏴☠️ Incransom has just published a new victim : Seetelhotels.de
Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
-
Threat Intel via The Record
Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands…
-
AI Security via Rapid7
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls. The new privileged user in…
-
Threat Intel via The Hacker News
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on…
-
Ransomware via ransomware.live
🏴☠️ Nitrogen has just published a new victim : Walbro
Walbro is a global market leader in engine management and fuel systems for the Outdoor Power Equipment, Recreational, Marine, and Personal Transportation markets, and a…
-
Breaches via Wired
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says a bug caused the issue.