New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
What's new: A new Go-based botnet named NadMesh has emerged, targeting exposed AI services to harvest cloud keys and Kubernetes...
Top Network Security News
Top Network Security News, Internet and IT security news and headlines from around the web.
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
What's new: Researchers have identified seven malicious npm packages targeting the Vite frontend tooling ecosystem, part of a software supply...
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
What's new: A flaw in OpenSSL, named HollowByte, allows attackers to freeze server memory with 11-byte TLS requests. This issue...
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
What's new: A critical vulnerability, dubbed wp2shell, has been discovered in WordPress core that allows unauthenticated attackers to execute code...
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict
Nsasoft US LLC has released NSAuditor AI Enterprise 0.32.4, a matrix-neutral depth pass on the AWS RDS auditor that closes...