New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
What's new: A new Go-based botnet named NadMesh has emerged, targeting exposed AI services to harvest cloud keys and Kubernetes...
Information Security
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
What's new: Researchers have identified seven malicious npm packages targeting the Vite frontend tooling ecosystem, part of a software supply...
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
What's new: A flaw in OpenSSL, named HollowByte, allows attackers to freeze server memory with 11-byte TLS requests. This issue...
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
What's new: A critical vulnerability, dubbed wp2shell, has been discovered in WordPress core that allows unauthenticated attackers to execute code...
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict
Nsasoft US LLC has released NSAuditor AI Enterprise 0.32.4, a matrix-neutral depth pass on the AWS RDS auditor that closes...