Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected all seven PyPI wheel releases and official Docker...
A five-year-old software vulnerability recently compromised servers associated with the Ukrainian state data exchange infrastructure. Specifically, an unidentified adversary leveraged the critical Log4Shell flaw within the Graylog log management platform. Consequently, the intruder achieved...
Security researchers recently uncovered a catastrophic cryptographic blunder at Indian certificate authority eMudhra, operating as emSign. Specifically, auditors discovered that private keys for eight intermediate certificate authorities were compromised. Because intermediate certificates issue downstream...
A Chinese-speaking threat actor recently directed autonomous AI agents to conduct large-scale cyberattacks against online storefronts. Beginning on September 25, these autonomous systems targeted more than 1,200 commercial websites across four nations. According to...
A critical architectural flaw in the Linux IPv4 network stack allows unprivileged guest machines to escape isolation. Specifically, threat actors can seize total root control over the underlying physical host. The vulnerability carries an...
The past week proved remarkably unglamorous for the global fashion industry. Immediately following the high-profile ASOS breach and reports of a potential intrusion at H&M, cybercriminals targeted TFG London. Consequently, the assault directly impacted...
The notorious ShinyHunters collective recently lost its original leadership. However, opportunists quickly stepped forward to seize the infamous moniker. Following several high-profile hacker arrests, a new contender for the criminal brand emerged online. Specifically,...
XWorm has crossed a critical threshold where a conventional Remote Access Trojan (RAT) begins operating like a comprehensive pocket surveillance suite. Recently, Netskope Threat Labs identified four distinct variants of the malware circulating actively...
Threat actors recently exfiltrated proprietary Meta product source code alongside the personal records of approximately 1,500 individuals. Specifically, the attackers gained unauthorized access to several corporate GitHub repositories. To execute the intrusion, the adversaries...
A severe critical vulnerability has been unequivocally identified within the WordPress ecosystem. Malicious actors are currently attempting to exploit this flaw to surreptitiously upload executable PHP files, entirely bypassing the need for password authentication....
An extraordinary deluge of DNS traffic overburdened the DomainTools infrastructure to such an extent that a solitary domain generated up to 500,000 novel observations per second during peak intervals. Over a span of several...
NetScaler administrators face an increasingly frustrating reality, compelled to deploy device updates mere days after concluding a previous wave of frantic patching. Citrix recently issued an urgent advisory regarding CVE-2026-107406, a critical vulnerability commanding...
