Collaborate Disseminate
Attackers can send crafted media files to execute code in any application that uses FFmpeg’s libavcodec library.
The post FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances appeared first on SecurityWeek.
Continue reading FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances
Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.
The post Russian Initial Access Broker Behind FortiBleed Campaign appeared first on SecurityWeek.
Continue reading Russian Initial Access Broker Behind FortiBleed Campaign
Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information.
The post Canadian Electricity Provider London Hydro Discloses Data Breach appeared first on SecurityWeek.
Continue reading Canadian Electricity Provider London Hydro Discloses Data Breach
Vulnerable WordPress plugin iterations leak API keys, secrets, tokens, server information, and other data.
The post Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data appeared first on SecurityWeek.
Continue reading Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions.
The post North Korean Hackers Blamed for Mastra NPM Supply Chain Attack appeared first on SecurityWeek.
Continue reading North Korean Hackers Blamed for Mastra NPM Supply Chain Attack
A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign.
The post Fortinet Responds to FortiBleed Campaign appeared first on SecurityWeek.
Continue reading Fortinet Responds to FortiBleed Campaign
HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers.
The post More Cybersecurity Firms Disclose Impact From Klue Hack appeared first on SecurityWeek.
Continue reading More Cybersecurity Firms Disclose Impact From Klue Hack
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
The post CryptoBandits Malware Doubles as a Backdoor, Abuses Tor appeared first on SecurityWeek.
Continue reading CryptoBandits Malware Doubles as a Backdoor, Abuses Tor
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
The post FortiBleed: 86,000 Fortinet Device Credentials Compromised appeared first on SecurityWeek.
Continue reading FortiBleed: 86,000 Fortinet Device Credentials Compromised
The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future.
The post Cybersecurity Firms Impacted by Klue Supply Chain Attack appeared first on SecurityWeek.
Continue reading Cybersecurity Firms Impacted by Klue Supply Chain Attack