Collaborate Disseminate
OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes.
To that end, it bann… Continue reading OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms.
One such service, Poison Claude, claims to off… Continue reading Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious… Continue reading Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django.
The three most serious:
An unauthenticated flaw in Veeam’s console that hands over a mana… Continue reading Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.
The new dea… Continue reading Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds.
The vul… Continue reading New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data.
The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tok… Continue reading Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. Th… Continue reading Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability.
… Continue reading Leaked n8n API Tokens Exposed Live Instances to Credential Theft
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed.
The “evil twin” extensions were… Continue reading Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data