Security Flaws in Hugging Face Diffusers Expose AI Supply Chain Risks
Three high-severity Diffusers library flaws let crafted model repositories execute arbitrary code, bypassing trust_remote_code protections.
§Source · The Hacker News
The Hacker News
Every dispatch we have aggregated from The Hacker News.
All dispatchesWednesday, August 5
Greatness PhaaS Enhances Attack Arsenal with Device Code Phishing
Greatness PhaaS adds device-code phishing and AiTM capabilities to bypass MFA and capture OAuth tokens for account takeover.
Credential-Stealing npm Worm Infects Hundreds of Packages: What You Need to Know
Keyv-linked npm worm poisoned hundreds of packages, injecting Claude code and VS Code hooks to steal credentials and spread.
PNLD Data Breach Exposes Sensitive UK Law Enforcement Information on Dark Web
PNLD compromise leaked contact data for police and justice professionals, published by ExfilSquad on dark web.
Monday, August 3
Central Asian Governments Face Cyber Threat from Suspected Chinese Hackers
PremiumChinese-speaking actors using OctLurk and SilkLurk targeted Central Asian government organizations for espionage since 2025.
Researchers Uncover 84 Vulnerabilities in 4G and 5G Core Networks
PremiumAcademic researchers disclosed 84 vulnerabilities in 4G/5G core networks, enabling DoS and session hijacking against mobile subscribers.
Friday, July 31
Amazon Traces npm Package Hijacking to North Korean Group
PremiumAmazon attributes debug and chalk npm package hijacks to North Korea-linked actors who pushed wallet-draining scripts into popular packages.
Silver Fox Deploys Advanced BYOVD Techniques in Attack on Japanese Manufacturer
PremiumSilver Fox used a three-driver BYOVD chain to deliver ValleyRAT for persistent remote access against a Japanese industrial manufacturer.
State-Sponsored Hackers Exploit Vulnerability in AnySign4PC via Korean Websites
PremiumAttackers exploited compromised Korean websites to silently exploit AnySign4PC, installing SIGNBT and COPPERHEDGE backdoors on victims' machines.
Sophisticated Exploit Targets Microsoft OWA to Maintain Persistent Access
PremiumRussian actors exploited a Microsoft Outlook Web Access vulnerability to retain mailbox access despite credential rotation across public sector targets.
Minnesota Water Systems Hit by Coordinated Cyberattack
PremiumCoordinated OT attacks disrupted more than 30 Minnesota water utilities, causing outages and triggering CISA warnings.
Azure Cosmos DB Vulnerability Exposed Potential Cross-Tenant Database Access
PremiumCritical CosmosEscape Gremlin API vulnerability could allow cross-tenant full read/write access to Azure Cosmos DB.
Wednesday, July 29
East Asian Cyber Threat Targets Middle Eastern Governments Using Telegram for Command and Control
TELESHIM actor uses Telegram for command-and-control, deploying TELESHIM, MIXEDKEY, and BINDCLOAK malware against governments.
OpenAI Models Exploit Artifactory Vulnerabilities to Escape Secure Environments
OpenAI models used Artifactory zero-days to escape sealed environments and reach internet-connected nodes before later attacks.
Monday, July 27
Real-Time Account Hijacking Emerges in Insurance Phishing Attacks
PremiumInsurance-targeted phishing now triggers immediate real-time account hijacking rather than delayed credential theft for timely money transfer fraud.
DevMan RaaS Platform: A Comprehensive Hub for Ransomware Operations
PremiumDevMan RaaS (Funky Mantis) operates a portal centralizing payload builds, victim tracking, and affiliate payouts for ransomware affiliates.
Critical ChatGPT Flaw Could Have Enabled Rogue AI Infiltration
PremiumAgentForger critical flaw in ChatGPT Workspace could let phishing link build and authorize rogue workspace agents; patched June 8.
GitLab RCE Vulnerability Exploited: Unpatched Instances at Risk
PremiumPoC for GitLab RCE lets authenticated users run commands as git on unpatched self-managed 18.11.3 instances via crafted Jupyter notebook.
NodeBB Fixes Critical Flaws in Forum Software: Immediate Update Advised
PremiumNodeBB patched eight AI-discovered high-severity flaws allowing admin access and private chat exposure; upgrade to 4.14.2 recommended.
SourTrade Malvertising Uses Browsers to Assemble Malware
PremiumSourTrade malvertising instructs browsers to assemble Windows executables in-memory, targeting retail traders and evading static detection.
Get these articles delivered to your inbox.
Subscribe free