Collaborate Disseminate
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company.
The stealer is built to take the secret… Continue reading Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories
A critical flaw in Apache HTTP Server’s HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday.
Only servers … Continue reading Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access.
In an advisory posted on its site, the company said there is no evidence that the incident involves… Continue reading ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients
Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems.
The vulnerabilities are listed below –
CVE-2026-108186 (… Continue reading Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation
Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments.
Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026.
Cynet’s CyOps and Research teams said they identified the suspicious activity in O… Continue reading Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits
Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday.
They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes… Continue reading Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us at Token as well. Then, we built an agent that brok… Continue reading We Built An Agent That Broke All of Our Security Rules. Here’s What We Learned.
The in-house Python script behind eMudhra’s October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys.
Each intermediate CA has its own private key, which the com… Continue reading eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws.
These cover 726 flaws in Windows, 174 in Office, 61 in Developer … Continue reading Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes