Public exploit out for Cisco IMC flaw granting root access
A public exploit now exists for the Cisco IMC flaw that lets low-privilege users run commands as root.
The Latest
Router vendor pulls firmware after ENDLESSDOORS backdoor claims
VulnCheck found a phone-home implant in Zbtlink router firmware while the vendor called it a maintenance feature.
Huntress finds hacker toolkit living inside Oracle database
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.
Ransom Cartel founder jailed 16 years over affiliate racket
Maksim Silnikau, the Belarusian behind the Ransom Cartel ransomware service, received a 16-year prison sentence.
Third AI lab in two weeks reports agent escape during testing
Meta confirmed one of its AI models breached a company during testing, the third AI lab escape disclosed in two…
Snowflake extortion suspect admits theft from 165 companies
Connor Riley Moucka admitted his role in the 2024 Snowflake raids that exposed records tied to more than 100 million…
TP-Link Omada chain turns guessed serial numbers into network takeover
Forescout's Vedere Labs built an attack chain from 15 flaws ending at the admin's cloud controller password.
Water utility hacks now reach a dozen states as FBI probes PLC attacks
Iran-linked actors are the leading suspects in a campaign that has hit at least 12 states since late July.
Beacon CRM hack exposes UK charity donor data, backups likely stolen
The charity CRM provider told customers to assume all stored data, including attachments, was downloaded.
Pass-ta-key attacks turn endpoint malware into passkey account takeover
Unit 42 details three ways malware can abuse Chrome's synced passkey flows to hijack accounts.
Three freshly exploited bugs land on CISA’s must-patch list
Langflow, N-able N-central, and Apache Tomcat flaws join the KEV catalog under active exploitation.
Open vSwitch datapath bug hands out root on stock Linux builds
A 13-year-old memory corruption flaw ships with a public exploit covering roughly 800 kernel builds.
AI test agents faked identities to slip malware into open-source code
UK evaluators caught frontier models inventing personas and socially engineering a real open-source maintainer.
Self-propagating npm worm poisons 400-plus packages via stolen tokens
The Mini Shai-Hulud worm stole publisher credentials, republished tainted packages, and burrowed into AI coding tools.
Spotlight
ExfilSquad linked to dark web dump of UK police emails
The Police National Legal Database says contact details for officers and government staff surfaced on the dark web after an incident found July 26.
Second N-able patch closes N-central hole after attackers slip past first
Attackers used an authentication bypass in N-able N-central to reach managed endpoints, and the vendor's first fix did not block the path.
Forged DNA files fool lab software as Thermo Fisher ships signatures
A researcher used AI to alter DNA evidence files in about 45 minutes, prompting Thermo Fisher to add digital signatures across five product lines.
Diffusers bug trio bypasses Hugging Face code trust guard
Three flaws in Hugging Face's Diffusers library let crafted model repositories run arbitrary code despite trust_remote_code protections.
Features
River Bank leans on ransomware promise that stolen data was deleted
River Financial Corporation told regulators it obtained assurances from the ransomware crew that breached it that stolen data was deleted.
INC ransomware cashes in on SonicWall SMA1000 zero-day chain
The INC ransomware gang is the most active user of two exploited SonicWall SMA1000 flaws, adding victims across five countries…
ChatGPT-powered scam ring in Cambodia cut off by OpenAI
OpenAI banned a coordinated network of ChatGPT accounts tied to Cambodian scam compounds that ran investment, romance and impersonation fraud.
Horizon3 lands $250M Series E to speed AI-driven pentesting
Horizon3 raised $250 million in a Series E round that tripled its valuation to $2 billion, backing AI agents that…
Adform tracker hack redirected crypto payments to attacker wallets
A poisoned JavaScript file served by ad tech firm Adform rewrote crypto wallet addresses on customer sites.
Adobe fixes CVSS 10 Campaign Classic bug that needs no user click
Adobe patches a CVSS 10 Campaign Classic flaw that allows code execution with no user interaction.
