Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan,… Read More »BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team… Read More »Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws… Read More »Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. “Artifacts from this investigation… Read More »Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the… Read More »Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue,… Read More »URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told… Read More »Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on… Read More »Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing… Read More »PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the… Read More »Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data