Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability, tracked as CVE… Continue reading CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed
Agentic web browsers that leverage artificial intelligence (AI) capabilities to autonomously execute actions across multiple websites on behalf of a user could be trained and tricked into falling prey to phishing and scam traps.
The attack, at its core… Continue reading Researchers Trick Perplexity’s Comet AI Browser Into Phishing Scam in Under Four Minutes
Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution.
The vulnerabilities are listed below –
CVE-2026-2… Continue reading Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in partnership with authorities from Thailand, the U.S., the U.K., Canada, Korea, Japan, Singapore, the Philippines,… Continue reading Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems.
The vulnerabilities in question listed below –
CVE-2019-17571 (CVSS score: 9.8) – A code injectio… Continue reading Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
“You knew, and you could have acted. Why didn’t you?”
This is the question you do not want to be asked. And increasingly, it’s the question leaders are forced to answer after an incident.
For years, many executive teams and boards have treated a … Continue reading What Boards Must Demand in the Age of AI-Automated Exploitation
Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known.
Of these, eight are rated Critical, and 76 are rated Important in severity…. Continue reading Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim’s cloud environment within a span of 72 hours.
The attack started with the theft of a developer’s … Continue reading UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors.
The Rust packages, published to crates.io, are listed below –
chrono_anchor
dnp3times
time_… Continue reading Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks.
The activity involves the exploitation of recently d… Continue reading FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials