Loading
§The archiveMon · Wed · FriM · W · F
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInColdcard hardware wallet firmware bug exploited, resulting in $89M stolen and product inventory destroyed to prevent further compromise.
Three high-severity Diffusers library flaws let crafted model repositories execute arbitrary code, bypassing trust_remote_code protections.
Greatness PhaaS adds device-code phishing and AiTM capabilities to bypass MFA and capture OAuth tokens for account takeover.
Mini Shai-Hulud/npm campaign compromises popular packages, indicating coordinated supply-chain poisoning activity.
Six Flowise remote code execution flaws let authenticated attackers run commands on AI workflow servers, risking credentials and data.
Keyv-linked npm worm poisoned hundreds of packages, injecting Claude code and VS Code hooks to steal credentials and spread.
DarkSword iOS exploit kit expanded across 180 web properties, targeting iOS 18.4-18.7 to steal sensitive device data.
A decades-old BMC issue leaks authentication hashes pre-login across 24,000+ server-management interfaces, risking data center takeover.
7babka retail chain experienced an intrusion via a compromised third-party account exposing Jira and sensitive data.
Forescout found 15 Omada ZTP vulnerabilities that can be chained to achieve full network takeover of TP-Link Omada ecosystems.
INC ransomware group aggressively exploits SonicWall SMA 1000 zero-days to steal and encrypt data for extortion.
Proof-of-concept shows Microsoft Copilot can be abused to escalate access, hijack executive accounts, and redirect wire transfers.
PNLD compromise leaked contact data for police and justice professionals, published by ExfilSquad on dark web.
ChainDrop poisoned 1,300+ npm packages, threatening developer supply chains and downstream applications.
Active exploitation of N-able N-central CVE-2026-18577 allows attackers admin access to RMM servers; urgent patching recommended.
Get these articles delivered to your inbox.
Subscribe freeSANS NewsBites highlights Minnesota water utilities attacks, IPMI BMC hash leaks, and Cisco FMC hardcoded credential exploitation.