Security
Rails ImageMagick flaw enables arbitrary file access
The Rails ImageMagick flaw allows file writes and reads. Learn which Rails uploads are affected and how to verify exposure.
▚Security
Security
Google Patches Actively Exploited Android Memory Flaw
Google patched an actively exploited Android RCE bug. Security teams should update affected devices and hunt for exploitation.
Security
Synology NAS ransomware: patch the 2024 flaws now
Synology NAS ransomware targets outdated DSM systems. Patch DSM, restrict management access and keep recovery copies outside the NAS.
Security
LLMjacking Is Turning Stolen Cloud Tokens Into a Million-Dollar Problem
LLMjacking turns stolen cloud credentials into runaway AI charges. Here is how the attack works and how defenders can contain…
Security
cPGuard supply-chain attack turns security updates into malware
A cPGuard update channel was compromised to push a backdoor. Here is how Linux defenders should contain the fallout.
Security
Fake Air Raid Alerts Expose Civilian App Weaknesses
Cyberattacks on emergency alert apps in Ukraine and Russia show how compromised civilian services can undermine public safety and trust.
Security
Binance Hack: Recruitment Scams Reached the Wallet Signing Layer
The Binance hack shows how fake job interviews, poisoned developer tools and stolen credentials reached wallet signing infrastructure.
Security
Oracle Health breach: 20 million people exposed
Nearly 20 million people were reportedly exposed in the Oracle Health breach. The full client scope remains unclear, but healthcare…
Security
Assad-linked hacker gets 42 months for 13-year attack campaign
Ahmad Umar Agha was sentenced for an Assad-linked hacking conspiracy that targeted Western institutions and contributed to a $136 billion…
Security
mSecure Warning Leaves Customers Facing a Broad Credential Reset
mSecure told customers to consider changing stored passwords, resetting 2FA and removing passkeys after suspicious activity. Limited disclosure leaves…
Security
Binance Wallet Breach Shows How Fake Jobs and AI Tooling Enabled a $6.34B Theft
Binance says fake interviews, poisoned developer tools and internal AI access formed one connected attack chain. The lesson: trust, endpoints…
Security
Personal AI Agent in Pentagon Network Raises Questions About Contractor Access
A personal AI agent reportedly spent about two months connected to a secure Defense Department system, exposing questions about contractor…