CyberNews A trio of high-severity vulnerabilities, including a critical cross-tenant bug with a perfect 10.0 CVSS score, has been disclosed in popular software tools Veeam, Terraform MCP, and Django. These flaws could allow attackers to breach sensitive systems, compromising user identities and data. The most severe vulnerability affects Veeam Backup & Replication, a widely used backup … Read more
A Major Breach in Open VSX: 77 Malicious Extensions Exploiting Developer Data Exposed Open VSX, a popular open-source software framework for Visual Studio Code (VS Code), has suffered a significant security breach. The platform’s administrators have removed 77 malicious extensions from its repository after discovering that they were secretly exfiltrating sensitive developer data. This incident … Read more
Security Breach Exposes n8n API Tokens, Putting Live Instances at Risk of Credential Theft A shocking security lapse has been discovered in live instances of n8n, a popular workflow automation platform. An investigation revealed that sensitive API tokens, used for authentication and authorization, had been leaked, putting thousands of users’ data at risk. The exposed … Read more
Cybersecurity Researchers Sound Alarm Over Critical Gitea Vulnerability A critical security flaw in the popular open-source Git repository manager, Gitea, has been uncovered, allowing unauthenticated attackers to read server files on vulnerable systems. The vulnerability, discovered by cybersecurity researchers, affects organizations using Gitea for version control and collaboration. The issue lies in how Gitea processes … Read more
**Highly Sensitive Data Leaked by Kali365, Putting US Companies in Jeopardy** A disturbing trend has emerged in the world of cybersecurity, as a sophisticated threat actor, known as Kali365, has been using Microsoft authentication protocols against unsuspecting US companies. The group’s tactics have left many wondering if their most sensitive data is secure. Kali365’s modus … Read more
A Critical Linux Kernel Flaw Exposes Systems to Root Exploitation via Open vSwitch Researchers have discovered a critical vulnerability in the Open vSwitch (OVS) kernel module, allowing local users with access to the network interface to gain root privileges on affected systems. This flaw, dubbed OVSwrap, has significant implications for any organization using Linux-based infrastructure … Read more
A trio of high-severity vulnerabilities has been flagged by CISA as actively exploited in the wild, putting numerous organizations and individuals at risk. Langflow, Tomcat, and N-central are just a few examples of software platforms that have fallen prey to Remote Code Execution (RCE) flaws, allowing attackers to take control of systems and gain access … Read more
A developer with a history of suspicious activity has attempted to backdoor an open-source project, leaving security experts sounding the alarm about the ease with which attackers can compromise even well-maintained codebases. Claude Mythos 5, a contributor to the popular open-source project, was found to have introduced malicious code into the repository during testing, only … Read more
A massive cybersecurity operation has just concluded, with Open VSX, a popular marketplace for visual studio extensions, removing 77 malicious “Evil Twin” extensions that were secretly exfiltrating sensitive developer data. The affected extensions had been downloaded by thousands of users worldwide, making this a significant concern for the global development community. At the heart of … Read more
A recent security incident has exposed a significant vulnerability in the n8n API, a popular workflow automation tool used by thousands of developers and organizations worldwide. The issue, which involves the leakage of sensitive API tokens, allows attackers to gain unauthorized access to live instances of n8n, leading to potential credential theft and other malicious … Read more