New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict 
Crypto24 ransomware hits large orgs with custom EDR evasion tool
What’s new: The Crypto24 ransomware group has developed custom tools to evade endpoint detection and response (EDR) solutions, targeting large...
Have You Turned Off Your Virtual Oven?
What’s new: The article emphasizes the importance of External Attack Surface Management (EASM) and Digital Risk Protection (DRP) tools for...
CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog
What’s new: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting N-able N-central to its Known...
OpenAI relaxes GPT-5 rate limit, promises to improve the personality
What’s new: OpenAI has relaxed the rate limits for GPT-5, increasing the weekly limit for GPT Plus subscribers to 3,000....
Spike in Fortinet VPN brute-force attacks raises zero-day concerns
What’s new: A significant increase in brute-force attacks targeting Fortinet SSL VPNs was observed on August 3 and August 5,...