Browsing Tag
Cybersecurity
76 posts
Chainalysis Breach Exposed Names, Emails and Roles After ‘Agentic’ Intrusion
Chainalysis says an intruder using “offensive agentic techniques” reached customer names, emails, user IDs and roles. Here is what is known and what customers should check.
ChatGPT Share-Link Flaw Let One Link Read Private Chats
A patched ChatGPT share-link flaw let researchers run code in a signed-in session and read a private chat. Here is how the MathLive chain worked and what to audit.
Cloudflare GLM-5.3 Leak Exposed 155 Cross-Tenant Responses
Cloudflare’s hosted GLM-5.3 model returned 155 responses containing other customers’ data. Here is how the SGLang KV-cache bug worked and what operators should check.
Cairn AI Agents Breached 100+ Sites: What Defenders Should Check
NorForge exposed autonomous Cairn intrusion campaigns that attempted 1,200 sites and compromised more than 100. Here is how the agents worked and what defenders should audit.
Plex2Shell Is Being Exploited: How to Check and Clean Your Plex Server
Plex2Shell is now being used to install miners and proxy software. Check your Plex version, hunt the early indicators, and know when to rebuild.
ConnectWise Cloud Backup Breach: Check These 7 Microsoft 365 App Identities
ConnectWise disabled seven cloud application identities after attackers entered Microsoft 365 tenants. Here is what MSPs should preserve, disable and inspect now.
Zero-Click Spyware Was Delivered Through Online Ads: How AdFection Worked
Citizen Lab traced zero-click spyware from a targeted ad to 45 Al Jazeera devices. Here is how AdFection worked and what defenders should block.
Fake Google HTTPS Certificates Came From Hijacked Country Domains
Attackers hijacked .gh, .sl and .as registries to obtain valid HTTPS certificates. Here is how the attack worked and what domain owners should check.
Citrix NetScaler Zero-Days: Patch Now, Then Hunt for Web Shells
Citrix patched two actively exploited NetScaler zero-days that allow unauthenticated remote code execution. Here are the fixed builds, attack path, log hunts and response order.
IDScan Breach Shows Why Scanned IDs Need an Expiration Date
IDScan confirmed unauthorized access to customer identity data after a dark-web service advertised more than 153 million driver’s-license records. The breach exposes a larger problem: ID-scanning systems can keep sensitive documents long after the check is finished.