hype
2
Substance
6
Brief · Security
Northflank breach led to abuse of customers' AI API keys
Cloud hosting platform Northflank warns customers to rotate all credentials and secrets after a breach led to unauthorized use of their AI API keys.
Topics
#cybersecurity
60 items · Page 1 of 5
hype
5
Substance
6
Brief · Security
FBI links North Korea to $6.3 billion Binance crypto heist
The FBI says North Korea-linked actors stole $6.3 billion from Binance on October 29. Binance says it has replaced 90 percent of the stolen funds.
hype
3
Substance
6
Brief · Security
Anthropic's Claude Code extension was backdoored on Cursor for about 11 hours
A malicious build of Anthropic's Claude Code VS Code extension was served through Cursor's marketplace for roughly 11 to 12 hours. Reports say it could plant SSH backdoors.
hype
2
Substance
5
Brief · Security
Chainalysis discloses breach by attackers using agentic techniques
Blockchain analytics firm Chainalysis disclosed a data breach. Attackers used what it calls offensive agentic techniques to reach internal systems and tools.
hype
4
Substance
6
Brief · Security
CISA reports active exploitation of a max-severity GitLab flaw
CISA says attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month. The sources give no details on affected versions or scale.
hype
6
Substance
6
Brief · Security
Binance reports $6.3 billion crypto theft, traced to a compromised DevOps laptop
Binance says about $6.3 billion in crypto was stolen and links the theft to a DevOps engineer's compromised laptop. Reports differ on the figure and on who is responsible.
hype
3
Substance
7
Brief · Security
Cisco fixes firewall zero-day that crashes SSL VPN devices
Cisco released updates for a denial-of-service zero-day in ASA and FTD software. Attackers are already using it to crash vulnerable firewalls remotely.
hype
5
Substance
7
Brief · Security
Fragnesia Linux kernel flaw chained with PHP2Shell in attacks
CISA told federal agencies to patch a high-severity Linux kernel privilege escalation bug. Attackers are chaining it with the PHP2Shell flaws in the wild.
hype
5
Substance
6
Brief · Security
Tailscale patches SSH flaws that allow root privilege escalation
Tailscale says its security team is patching almost a dozen vulnerabilities in its SSH implementation. The flaws could allow credential theft, server crashes and root privilege escalation.
hype
6
Substance
8
Brief · Security
PHP2Shell flaws exploited in the wild
Attackers have exploited the two PHP RCE flaws CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell. Servers running PHP remain at risk until patched.
Analysis · Security
PHP2Shell: How the Two PHP RCE Flaws Work and How to Check If Your Server Is Exposed
How CVE-2026-109618 and CVE-2026-109619 work, why a PHP version check misleads, what the four-day exploitation puzzle means, and how to test your servers.
hype
2
Substance
7
Brief · Security
Railway tells users to rotate secrets after suspicious activity
Railway, a cloud platform, warned developers to rotate secrets after detecting suspicious activity on systems that store customer environment variables.