New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict 
SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others
What’s new: The SocGholish malware, also known as FakeUpdates, is being distributed through Traffic Distribution Systems (TDSs) like Parrot TDS...
Bouygues Telecom confirms data breach impacting 6.4 million customers
What’s new: Bouygues Telecom has confirmed a data breach affecting 6.4 million customers, with personal information exposed during a cyberattack...
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw
What’s new: SonicWall has confirmed that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are linked to...
Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need
What’s new: A webinar has been announced focusing on Python supply chain security, highlighting the increasing risk of attacks through...
Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams
What’s new: A report by Infoblox reveals that the malicious ad tech group VexTrio has developed fake VPN and spam...