Fake OpenAI and Anthropic installers hide miners behind real binaries
Check Point traced the Yoba campaign through SEO-poisoned sites and real GitHub repositories shipping DLL sideloading.
The Latest
Google’s Gemini 4 Carbon doubles down on secure code
Google claims its newest model writes secure code more than twice as often as Argon and fixes flaws Chrome's team…
A logic-only chain walked out of Edge without memory corruption
Orange Tsai's Pwn2Own Berlin chain used five mishandled browser features and fewer than 100 lines of code.
Alpine rebuilt its GitLab after a CVSS 10 flaw nearly landed
The distro's own forge ran vulnerable Ruby for a week, and the logs needed to rule out code execution were…
Thousands of live Gitee secrets include an AI platform admin key
A month-long scan of 7.25 million Chinese repositories produced 26,400 credentials that still authenticated when tested.
Volt Typhoon rebuilds its relay chain in under two minutes
Black Lotus Labs mapped four years of throwaway relay hops that carried at least four zero-day exploits into US networks.
Stolen school logins are hopping between districts by email
MS-ISAC flagged leaked credentials at 808 K-12 organisations and traced attacks spreading through genuine staff mailboxes.
Attackers posed as 32 AI bots to hunt for secret files
Cequence caught one actor cycling through fabricated OpenAI, Anthropic and Meta user agents against roughly 90 credential paths.
An autonomous researcher found four bugs in lab control software
EPICS Base carries a 9.8 integer overflow that could turn accelerator consoles into remote code execution.
A vendor key on a public website exposed 238,000 health records
SquareML's read-only analytics credential sat online for fourteen months before anyone revoked it.
Adobe patches four 9.9 flaws in Campaign Classic at once
Eight critical bugs reach arbitrary code execution and security bypass in the marketing platform.
Turning off remote code trust does not save Unsloth users
A model-type string reaches exec() in a flaw rated 8.6, so a trusted-looking config can run attacker code.
Trend Micro maps three intrusions with AI at three depths
One attacker ran 44 agents from recon to reporting while another used a model only to write tools.
GMO offers $1M for tips after refusing an extortion demand
The Japanese group shut 26,739 trading desktops and is now paying for information leading to arrests.
Spotlight
Infisical reaches a $600M valuation on agent credential demand
The secrets manager raised $40M to keep AI agents away from the keys they act on.
So-net confirms 2.2 million member records left its database
Sony's Japanese internet arm found the October 19 break-in four days later and cut the server's network link.
FBI takes down a host that advertised its own impunity
Virtualine sold servers to criminals and promised to move their data if police came calling.
123 Reg blames an AI-driven intrusion on Chinese infrastructure
A UK registrar traced its September break-in to hosted agent skills copied from Anthropic's open-source releases.
Features
Device codes turn a shared document into a token theft
A phishing kit is walking US manufacturers past single sign-on without ever collecting a password.
Lazarus returns to Korean banking software in new campaign
Kaspersky attributes Operation FlashHole to North Korea's Lazarus Group, which abused another mandatory banking security component.
New Mexico hospitals divert ambulances after weekend intrusion
A cyber extortion crew claims 36,000 machines at the University of New Mexico while the state's only Level 1 trauma…
DreamHost resets mail and FTP passwords without a cause
Customers spent a weekend locked out of mail and FTP accounts after the host reset credentials and declined to say…
Ukraine warns that Dahua cameras answer to serial numbers
CERT-UA says attackers reached recorders and IP cameras over Dahua's cloud service without needing an open port or a public…
Two Cranelift bugs crack WebAssembly sandboxes at 9.9
Wasmtime fixed a silent overflow and a bad jump target that let a hostile module escape its sandbox, one of…