Latest Briefings
14 Trojanized npm Packages Deliver AI-Powered RedC2 4.0 Linux Backdoor
Researchers found npm packages posing as calendar and streak-tracking utilities that quietly drop an AI-assisted Linux implant called RedC2 4.0 onto developer…
Democrats Ask GAO to Probe Fallout From CISA Staffing Cuts
House lawmakers want the Government Accountability Office to examine how losing nearly a third of CISA's workforce has affected the agency's ability…
Microsoft Warns of Max-Severity Entra ID RCE Flaw Exploited in the Wild
Microsoft disclosed a CVSS 10.0 remote code execution vulnerability in Entra ID that has already been exploited, though it says customers do…
Defense Contractors More Confident in CMMC Scores, Less Able to Prove Them
Two new surveys of the defense industrial base show rising self-attested SPRS scores and rising confidence, but a shrinking share of contractors…
Critical Elementor Pro Flaw Lets Attackers Upload PHP and Execute Code
A CVSS 9.0 vulnerability in Elementor Pro's File Upload module lets attackers smuggle malicious PHP past validation and execute it on WordPress…
US Agencies Warn of AI-Generated Exploits Hitting Siemens S7 PLCs
NSA, CISA, FBI, DOE, and EPA say threat actors are using AI to build Python exploitation tools disguised as OT monitoring software,…
Citrix Patches Critical NetScaler Auth Bypass, Exploitation Expected Soon
A critical authentication bypass flaw in NetScaler ADC and Gateway lets unauthenticated attackers slip past login controls, and Rapid7 warns active exploitation…
New Manic Android Malware Relays Stolen Data Through Nearby Infected Phones
A newly documented Android trojan called Manic combines banking fraud, spyware, and remote control, and can bounce stolen data between nearby infected…
‘Kriminal’ AI Platform Offers Guardrail-Free Cybercrime Tools for Crypto
A newly surfaced AI platform reportedly provides unfiltered social engineering, offensive cybercrime, and OSINT capabilities to anyone paying in cryptocurrency, despite officially…
Sakura Internet Breach Now Estimated to Affect 1.36 Million Accounts
A separate investigation into a rental server hack uncovered a much larger intrusion into Sakura Internet's sales management system, potentially exposing customer…
Firefox 154 and Chrome 151 Patch Dozens of High and Critical Severity Bugs
Mozilla and Google shipped major browser updates this week, fixing 58 vulnerabilities in Firefox and 15 in Chrome, including several memory safety…
Windows 11 24H2 Home and Pro Lose Security Updates in Two Months
Microsoft is warning that Windows 11 24H2 Home and Pro editions, along with Windows 10 Enterprise LTSB 2016, will stop receiving updates…