INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds.

In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 s… Continue reading INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown→

Posted in Uncategorized

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

The vulnerabilities:…

Continue reading New Serious PHP Vulnerabilities Released and Patched→

Posted in Uncategorized

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security rese… Continue reading LiteLLM hit by second supply chain attack this year, users urged to rotate credentials→

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek.
Continue reading Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform→

OpenAI’s coding agents talked themselves out of being monitored

Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released earlier thi… Continue reading OpenAI’s coding agents talked themselves out of being monitored→