New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict 
Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft
What’s new: Researchers have identified a vulnerability in Amazon Elastic Container Service (ECS) dubbed "ECScape," which allows low-privileged containers to...
Akira ransomware abuses CPU tuning tool to disable Microsoft Defender
What’s new: Akira ransomware is exploiting the Intel CPU tuning driver 'rwdrv.sys' to disable Microsoft Defender during attacks. This driver...
St. Paul Declares Emergency After Major Cyberattack; AI Malware and Cryptographic Breakthroughs Highlight Evolving Threats
🔐 St. Paul Cyberattack On July 25, 2025, the city of St. Paul, Minnesota was hit by a sophisticated cyberattack...
AI-generated npm package drains Solana wallets (1,500+ installs)
What’s new: Researchers uncovered @kodane/patch-manager, an AI-generated npm package that hid a stealth wallet drainer triggered via postinstall. It created...
Okta Customer Support System Hacked, Sensitive Data Stolen
On October 19, 2023, Okta, a major provider of identity and access management (IAM) solutions, disclosed that its customer support...