Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as… Read More »Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to… Read More »A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls… Read More »MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco Talos said on September 22. The models… Read More »This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for… Read More »Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
A use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22.… Read More »Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to invest in improving alignment to combat risky behavior. Opus 5.5,… Read More »Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests
Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and what comes back is a… Read More »545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take “full control of the server,” the company said on September 22.… Read More »New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and… Read More »Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware