Cybersecurity

Nearly 1.5 million exposed secrets targeted in new revocation program

Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.

October crypto-tracker hack: Access cracked, law enforcement tokens packed

Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password.

OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'

The latest bug hunting model 'avoided exploiting out-of-scope services over 99 percent of the time', claims House of Altman

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package.

DigiCert data breach exposes customer information, identity documents

DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.

Closing the Identity Gap at the Service Desk

Attackers target IT service desks to bypass MFA by impersonating employees and convincing staff to reset passwords or register new authentication devices.

ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn't.

New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark

No gang has claimed the attack on incredible neighborhood resource yet

KT ups staff cybersecurity training

KT and Seoul National University teamed to tackle growing cybersecurity threats by developing a specialist training programme geared towards the dangers posed by AI and cloud usage.

OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.

Also: BleepingComputer

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of…

Vercel rolls out new protection against stolen session cookie attacks

Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware.

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords.

Cyberattack disrupts blood storage refrigeration systems in France

France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its facilities, threatening stored blood products.

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own.

SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.

NIKKE PC game launcher hacked to spread remote access, data-stealing malware

The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data.

mSecure password manager hack prompts password reset warnings

mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database.

Google Calendar phishing campaign hijacks sessions, bypasses MFA

A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others.

Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It

Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose traffic passes through a gateway the enterprise owns.

Malicious cPGuard Updates Served in OpsShield Supply Chain Attack

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

Also: Network World