News
-
OpenSSL fixes high-severity DTLS disclosure flaw
OpenSSL has released security updates for a high-severity DTLS flaw that can expose heap contents as plaintext or crash affected applications during handshake retransmission.
-
Phishing turns legitimate RMM into persistence
Microsoft says attackers disguised legitimate MSP360 software as business files, then used it to install ScreenConnect and create redundant remote access to compromised systems.
-
Kiteworks shutdown uncovered critical vulnerability
Kiteworks says its precautionary shutdown allowed it to identify and remediate a previously unknown critical vulnerability, with no evidence that attackers successfully exploited it.
-
Unsloth model preview triggered code execution
A patched Unsloth Studio flaw allowed code from a malicious model repository to run during model inspection, according to research whose severity assessment the project disputed.
-
Malicious GPTs feed ClickFix malware chain
Huntress says attackers are using custom ChatGPT instances to send victims into a ClickFix social-engineering chain that ultimately deploys remote-access malware.
-
One identity compromise reached Kubernetes clusters
Microsoft says an attacker turned a compromised account into Azure DevOps and Kubernetes access by abusing password recovery, authentication enrolment, and trusted development pipelines.
-
Zimbra flaw enabled deep mail-server compromise
Microsoft has documented exploitation of an unauthenticated Zimbra command-injection flaw that led to web shells, root access, credential collection, persistence, and attempted mailbox-data exfiltration.
-
MI5 warns universities over Chinese research links
MI5 has told UK universities to review links with a Chinese research institute it alleges funds work that improves Chinese intelligence capabilities, claims rejected by Beijing.
-
Sekoia puts agentic investigations into production
French cybersecurity company Sekoia has made its Elevate agentic investigation platform generally available after an early-access programme involving more than 2,000 customers.
-
New Spectre attack targets JIT engines
European researchers have demonstrated a Spectre-v2 technique that reuses stale branch-prediction entries in JIT environments, prompting mitigations in Linux and Oracle software.