Risk & Resilience

Automated WordPress Security Checks Introduced For Plugin Release Protection

Risk & Resilience
WordPress introduces automated security reviews for plugin releases to detect vulnerabilities, risky code and potential threats before updates reach users.

Four Ways Organizations Build Collaborative Cyber Resilience In AI Era

Global Insights
Organizations are being urged to strengthen cyber resilience through collaboration, trusted AI governance, shared intelligence, and coordinated defence to address evolving cyber risks across digital ecosystems.

CISA Lists Five Exploited Vulnerabilities Affecting Artifactory ScreenConnect And RouterOS

Risk & Resilience
CISA has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog.

OpenAI Agent Activity Linked To RubyGems Campaign Exploiting Documentation Servers

Risk & Resilience
Researchers have linked a RubyGems campaign involving thousands of malicious packages to OpenAI agents, with activity targeting RubyDoc servers and attempting data access operations.

GitLab Critical File Read Vulnerability Faces Active Exploitation Attempts

Risk & Resilience
GitLab has patched a critical CVSS 10 vulnerability that could expose sensitive files, with researchers reporting active probes targeting affected systems after disclosure.

China Based AI Labs Face Anthropic Claims Over Claude Distillation Campaigns

Risk & Resilience
Anthropic says it disrupted industrial scale illicit distillation campaigns involving several China based AI labs that allegedly targeted Claude using fraudulent accounts and proxy networks.

Sogou Input Method Vulnerability Enabled UNC3569 GRAYRABBIT Backdoor Deployment

Risk & Resilience
UNC3569 exploited a Sogou Input Method vulnerability to deploy GRAYRABBIT backdoor, giving attackers remote access capabilities on targeted Windows systems.

JFrog Artifactory Vulnerabilities Allow Attackers To Create Admin Accounts And Malware Access

Risk & Resilience
Attackers chained JFrog Artifactory flaws to gain administrator control, create accounts, install malicious plugins, and deploy backdoors on vulnerable self-hosted servers.

VMware Workstation And Fusion Security Flaws Enable Host Code Execution

Risk & Resilience
Broadcom has patched critical VMware Workstation and Fusion vulnerabilities that could allow attackers with local administrative access to execute arbitrary code on host systems.

Shai Hulud Infostealer Highlights Growing Credential Security Risks In Software Supply Chains

Risk & Resilience
GitGuardian researchers report that the latest Shai Hulud variant now scans 469 credential locations, highlighting increased risks to software supply chains, CI/CD systems, cloud platforms, and AI development environments.

FalconFlank Zero Day Targets CrowdStrike Falcon Privilege Escalation

Risk & Resilience
A security researcher has released a proof of concept for FalconFlank, a zero day privilege escalation flaw affecting CrowdStrike Falcon, while also highlighting recent findings involving Kaspersky and Microsoft Defender.

CISA Updates KEV Catalog With Seven Actively Exploited Security Vulnerabilities

Risk & Resilience
CISA has added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of reverse shell deployment, cryptocurrency mining, and attacks targeting AI infrastructure.
1...345...31Page 4 of 31

Recent articles

spot_img