​Open Source had a great childhood. For two decades it got to be a kid. It ran around barefoot, gave everything away, trusted strangers, and never once thought about who… Read More »Growing Up The Hard Way

​PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors. PortSwigger said a… Read More »AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

​Cybersecurity researchers have called attention to an active “widespread email-driven phishing campaign” that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key… Read More »Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

​A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it… Read More »Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

​Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses… Read More »Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

​Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and… Read More »New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

​A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising… Read More »TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

​Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect… Read More »Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

​Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host.… Read More »New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

​An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after… Read More »New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs