A 16-year-old Broadcom WPS bug lets nearby attackers own routers
The flaw in Broadcom's Wi-Fi setup code has no CVE and no patch, and the oldest chip families will never get one.
The Latest
The service account nobody owns is still your biggest identity bet
Rotating a machine password changes the secret but not the access, which is why standing privilege survives every vault you…
A FortiManager zero-day let a FortiGate implant stay hidden for months
Palo Alto Networks tied the 2024 telecom intrusion to UNC5820, whose PeerStitch implant survived on tagged VPN sessions long after…
Malformed packets carry a KVM guest straight into the host
A 9.3-rated hypervisor escape needs only a few bad IPv4 packets from a guest, and the kernel fix is landing…
Japan’s SiteGuard WAF is being exploited while owners still patch
Attackers already have working code for the command injection bug, and updating the product can wipe the evidence they left…
One stale login opened five million California student records
A testing contractor's file transfer site handed over assessment data spanning two decades after a single compromised credential sat unnoticed…
ConnectWise froze cloud backups after a token leaked into the wild
Huntress counted 162 Microsoft 365 tenants with sign-ins traced to one vendor-held application identity, and the services stayed dark through…
Plex2Shell exploit chain drew miners one day after the write-up
A honeypot watching vulnerable Plex Media Server builds caught XMRig miners and residential proxy software within hours of a public…
Bank of America hires 1,000 contractors to patch Windows flaws
A 1.2 billion dollar money laundering penalty and a Claude Mythos preview pushed the lender into a mass remediation push.
Ransom crews found that locking the front door works better than encrypting
Responders describe intrusions that reach into HVAC, badge readers and refrigeration, turning physical disruption into negotiating leverage.
A 979 download npm package carried its shellcode inside a native addon
SafeDep traced imgdecode to the MALFEX publisher cluster, which has been seeding Windows-targeting packages since August 2023.
Security job ads slide 26 percent as compliance roles absorb the demand
CyberSN counted 320,210 fewer US postings than last year at this point, with leadership openings down nearly 39 percent from…
Forged conference invites feed a Google credential relay aimed at Taiwan analysts
Cisco Talos says the UAT-11985 emails share one syntactic skeleton, with swapped QR posters pulling victims into a live adversary-in-the-middle…
A backdoored backup updater hit just one machine
Attackers rewrote two unsigned files on AOMEI update servers for minutes at a stretch, and any Backupper install that polled…
Spotlight
Six days of AI token time bought Xbow a full Chrome escape
Three chained zero-days and roughly 40,000 dollars in model charges delivered code execution outside the browser sandbox on Windows.
F5 patches three critical NGINX overflows reachable without a login
Eleven defects ship in the release, and two of the critical ones let an unauthenticated request overflow memory in specific configurations.
Proofpoint writes a 6.3 billion check for the data security shop Varonis
The all-cash deal folds Varonis data visibility into Proofpoint threat intelligence as both vendors chase AI agent risk.
ConnectWise kills cloud backups after seven app identities were hijacked
The vendor revoked certificates and stopped scheduled backups after intruders used stolen application credentials to reach customer Microsoft 365 tenants.
Features
OpenBSD picks a 37-year-old bug as an exploit chain’s front door
A research firm built a working root exploit on Unix by chaining an integer overflow patched as a reliability fix…
GhostAction broke into 1,900 GitHub accounts in a single wave
A second surge of the credential-theft campaign pushed malicious workflows across 28,000 repositories in about twenty minutes.
Langflow MCP bug draws 1,423 exploit attempts from 27 addresses
An authenticated flaw that passes a user-supplied command straight to bash is being hammered by attackers who only need one…
Burger King Japan app breach exposed data on 11 million diners
Attackers sat inside the fast-food chain's membership system for five days and walked off with contact details for roughly 11.18…
Hijacked backup app tokens opened 173 Microsoft 365 tenants
Microsoft says a compromised ConnectWise Cloud Backup OAuth application let an intruder mint access tokens across 173 customer tenants.
Microsoft’s follow-up patch wave hits two dozen Office bugs
A second batch of fixes lands days after the record Patch Tuesday rollout.