SecurityWeek (1 hour ago)
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems.
Read the full story on SecurityWeek.
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime’s built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send a client pieces of its memory, including responses intended for other connections.
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company.
The developers of an infostealer malware assert that their program can continue accessing a victim’s Gmail inbox even after the account’s password is reset.
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform.
65 active sources
20 Turkish · 45 English
All sources
