|
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
|
token replay
adversary-in-the-middle
Microsoft 365
email security
account compromise
cyber attack
|
Source: opens original article in a new tab
|
|
|
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
|
penetration testing
capture the flag
PHP2Shell
bug bounty
Bitcoin
vulnerability exploitation
|
Source: opens original article in a new tab
|
|
|
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
|
github
secrets theft
github actions
cyber attack
data breach
gheist
code repository
|
Source: opens original article in a new tab
|
|
|
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
|
UEFI
bootkit
malware
Secure Boot
Baton Drop
espionage
Kaspersky
Avast
|
Source: opens original article in a new tab
|
|
|
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
|
Node2Shell
Brotli
vulnerability
code execution
Node.js
Python
Microsoft
patching
|
Source: opens original article in a new tab
|
|
|
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
|
CISA
KEV
Collabora Online
Arista VeloCloud
vulnerability
active exploitation
|
Source: opens original article in a new tab
|
|
|
AI coding agents hijacked using AGENTS.md file in Downloads folder
|
AI coding agents
security vulnerability
malicious markdown
npm package
supply chain attack
|
Source: opens original article in a new tab
|
|
|
Binance Reports $6.3 Billion Crypto Theft, Says 90% of Affected Assets Replenished
|
Binance
cryptocurrency
cybersecurity
crypto theft
|
Source: opens original article in a new tab
|
|
|
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
|
PHP
vulnerabilities
cyberattacks
scripting language
|
Source: opens original article in a new tab
|
|
|
New Serious PHP Vulnerabilities Released and Patched
|
PHP vulnerabilities
remote code execution
security patches
web server security
PHP-FPM
mod_php
|
Source: opens original article in a new tab
|
|