A trio of critical security flaws has been discovered in popular software, putting millions of users at risk. Veeam, Terraform MCP, and Django have all received patches for vulnerabilities that could allow attackers to gain control over entire systems, with one bug earning a maximum CVSS score of 10.0. The most severe flaw affects Terraform … Read more
Cybersecurity researchers have uncovered a series of vulnerabilities in Paperclip AI, a popular software platform used for automating various business processes. The flaws, which allow attackers to run arbitrary host commands, can be exploited via malicious agent imports. This means that hackers can gain unfettered access to sensitive systems and data, putting thousands of users … Read more
A Chilling Revelation: Poisson Claude Exploits Customer Data for Malicious Gain A disturbing discovery has shed light on a widespread practice where identity exposure is being leveraged by attackers to gain unauthorized access to sensitive systems. Dubbed “Poisson Claude” after its alleged developer, this technique involves exploiting customer data to unlock active attack paths and … Read more
Federal Agencies Given Three Days to Mitigate Critical Vulnerabilities Exploited by Hackers The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to federal agencies, alerting them to a trio of critical vulnerabilities being actively exploited by hackers. The flaws affect IBM’s Langflow visual framework for building AI agents, N-able’s remote monitoring … Read more
A sophisticated cyberattack campaign has been uncovered, targeting US companies with a novel exploit that leverages Microsoft’s authentication mechanisms against its own security protocols. Dubbed “Kali365,” this attack vector takes advantage of vulnerabilities in Microsoft Azure Active Directory (Azure AD), allowing attackers to gain elevated privileges and traverse organizational boundaries. At the core of Kali365 … Read more
A newly discovered vulnerability in Linux kernel components, known as OVSwrap, has left many organizations vulnerable to a potentially devastating attack. The flaw, which affects systems running Open vSwitch (OVS), allows local users to gain root privileges on affected systems, essentially giving them free rein over the network. The OVS system is used for virtual … Read more
A New Wave of Sophisticated Attacks Uses npm Packages and Ethereum Recipient Addresses to Exfiltrate Sensitive Data Cybersecurity researchers have uncovered a novel attack vector that leverages the popular npm package manager to deliver sophisticated malware. The malicious code, disguised as legitimate packages, has been found to contain a clever mechanism for exfiltrating sensitive data … Read more
A trio of high-severity vulnerabilities, including a critical cross-tenant bug with a perfect 10.0 CVSS score, has been disclosed in popular software tools Veeam, Terraform MCP, and Django. These flaws could allow attackers to breach sensitive systems, compromising user identities and data. The most severe vulnerability affects Veeam Backup & Replication, a widely used backup … Read more
A Major Breach in Open VSX: 77 Malicious Extensions Exploiting Developer Data Exposed Open VSX, a popular open-source software framework for Visual Studio Code (VS Code), has suffered a significant security breach. The platform’s administrators have removed 77 malicious extensions from its repository after discovering that they were secretly exfiltrating sensitive developer data. This incident … Read more
Security Breach Exposes n8n API Tokens, Putting Live Instances at Risk of Credential Theft A shocking security lapse has been discovered in live instances of n8n, a popular workflow automation platform. An investigation revealed that sensitive API tokens, used for authentication and authorization, had been leaked, putting thousands of users’ data at risk. The exposed … Read more