Cybersecurity, AI, etc.
A malicious npm package named indexed-btree, presented as the legitimate sorted-btree package, accumulated millions of downloads, SecurityWeek reported. The package reportedly hid a malware trigger in a prototype method. Development…
A Chinese threat actor has targeted vulnerable Zyxel GS1900 switches worldwide for sensitive-information exfiltration, SecurityWeek reported. The activity follows reporting on active exploitation of a flaw affecting the switch line.…
WordPress has patched a vulnerability researchers call Click2Shell. According to SecurityWeek, the issue could let an attacker install themes and achieve remote code execution. Site owners should apply the relevant…
CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 22 after evidence of active exploitation. The agency’s alert identifies the additions as affecting Check Point products. Organizations…
What happened: Spiceworks published guidance on the end-of-support status for SonicWall Generation 6 firewalls and the resulting planning considerations for affected organizations. Why it matters: Perimeter devices are high-value targets.…
What happened: Cohesity announced Agent Resilience, a product initiative aimed at protecting and recovering infrastructure used by AI agents. This is a vendor announcement; organizations should evaluate the claimed capabilities…
What happened: Channel Insider reported that only 10% of respondents to a survey expressed confidence in meeting a proposed 24-hour cyber-incident reporting requirement associated with the UK Cyber Bill. Why…
What happened: The Indian Express reported that Z.ai disabled features in its AI coding assistant following a security issue. The report underscores the sensitivity of coding assistants, which may handle…
What happened: CyberInsider reported on PAYLOAD ransomware activity that reportedly uses Windows Group Policy as part of attacks designed to cause disruption without relying on traditional bulk file encryption. The…
What happened: Multiple cybersecurity outlets reported that the ShinyHunters group claimed control of infrastructure associated with the Cl0p ransomware operation’s leak site and used it to demand payment. The claims…