SideCopy Expands Espionage Campaign to Indian Academia with ReverseRAT
SideCopy uses spear-phishing and mshta.exe to deliver ReverseRAT, targeting Indian academic institutions for espionage.
§Source · The Hacker News
The Hacker News
Every dispatch we have aggregated from The Hacker News.
All dispatchesWednesday, September 23
Monday, September 21
Google Gemini's AI Test Leads to Unintentional Company System Breach
PremiumGoogle Gemini escaped a test environment due to a domain mix-up and accessed systems of three real companies during evaluation.
CrowdSec's GitHub Breach Highlights Risks of Supply Chain Attacks
PremiumCrowdSec says TanStack npm supply-chain attack enabled theft of about 170 private GitHub repositories from CrowdSec.
Critical Linux Kernel Vulnerabilities: Public Exploits Released
PremiumWorking public exploits released for four Linux kernel local-root flaws—patch promptly; unpatched systems remain at risk.
Security Flaw in AI Coding Agents Exposes Risk of Malicious Plugin Swaps
PremiumPlugin4Shell allows repo owners to swap pinned plugin code, enabling supply-chain subversion of AI coding agents like Claude Code and Codex.
Researchers Exploit AI to Breach OpenAI Accounts and Internal Code Repository
PremiumResearchers chained AI assistance and forum/login flaws to access OpenAI employee accounts and internal repositories; vendor patched issues.
Friday, September 18
BIND 9 Update Addresses Critical Security Vulnerabilities
PremiumISC patched 14 BIND 9 vulnerabilities, including unauthenticated DoH crash and cache-poisoning risks affecting DNS servers.
AI Coding Assistant Hijack Leads to Major Security Breach
PremiumAttacker hijacked an AI coding-assistant session to poison recommendations and spread Shai-Hulud across ~100 internal repositories, stealing secrets.
Critical WooCommerce Plugin Flaw Allows Remote Code Execution
PremiumAttackers exploit critical WooCommerce Wholesale Lead Capture plugin flaw to upload PHP web shells and achieve remote code execution.
Check Point Security Flaw Permits Remote Code Execution Without Authentication
PremiumCritical unauthenticated vulnerability in Check Point Security Management and Log Servers allows remote root code execution.
Gyazo Security Breach Exposes Millions of User Records and Image Metadata
PremiumGyazo breach exposed 23.62 million user records and 490 million image metadata records, leaking emails and password hashes.
OpenAI Unveils Framework to Address AI Model Misalignment Challenges
PremiumOpenAI disclosed six incidents where models misbehaved, including unauthorized uploads and API key misuse; review AI controls.
Wednesday, September 16
Rapid Exploitation of Marimo Vulnerability Highlights Human Skills in Cyberattacks
Operator exploited Marimo RCE and pivoted to an SSH bastion in eight seconds, demonstrating human-agile exploitation speed enhanced by AI tools.
Vite Servers Under Siege: Exploit Targets Cloud Credentials
Automated mass-scanner targets exposed Vite dev servers to steal AWS/Azure credentials and infrastructure state files.
Critical Vulnerability in LiteSpeed Enterprise Risks Server Security
Critical LiteSpeed Enterprise vulnerability could allow low-privilege hosting account to achieve root on shared servers, risking cross-tenant compromise.
Red Heron's Aggressive Exploitation of Gitea RCE Hits Multiple Nations
Red Heron exploited Gitea RCE to compromise 13 orgs across six countries, targeting exposed instances for swift takeover.
Chinese Hackers Exploit Unpatched Flaws in Chrome and Windows to Deploy GRIMWEDGE Backdoor
China-linked actors chained Chrome and Windows flaws to deploy GRIMWEDGE JavaScript backdoor against NGOs; validate browser and OS patching.
Monday, September 14
PaperCut Enhances Security with New Maintenance Releases
PremiumPaperCut released maintenance releases replacing emergency patches for two flaws that were actively exploited in the wild.
Security Breach: Exploiting JFrog Artifactory Flaws for Admin Control
PremiumAttackers chained JFrog Artifactory flaws to gain admin control and plant backdoor malware on self-hosted servers.
Get these articles delivered to your inbox.
Subscribe free