Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
WordPress has patched a vulnerability researchers call Click2Shell. According to SecurityWeek, the issue could let an attacker install themes and achieve remote code execution. Site owners should apply the relevant…
CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 22 after evidence of active exploitation. The agency’s alert identifies the additions as affecting Check Point products. Organizations…
What happened: Spiceworks published guidance on the end-of-support status for SonicWall Generation 6 firewalls and the resulting planning considerations for affected organizations. Why it matters: Perimeter devices are high-value targets.…
What happened: Cohesity announced Agent Resilience, a product initiative aimed at protecting and recovering infrastructure used by AI agents. This is a vendor announcement; organizations should evaluate the claimed capabilities…
What happened: Channel Insider reported that only 10% of respondents to a survey expressed confidence in meeting a proposed 24-hour cyber-incident reporting requirement associated with the UK Cyber Bill. Why…
What happened: The Indian Express reported that Z.ai disabled features in its AI coding assistant following a security issue. The report underscores the sensitivity of coding assistants, which may handle…
What happened: CyberInsider reported on PAYLOAD ransomware activity that reportedly uses Windows Group Policy as part of attacks designed to cause disruption without relying on traditional bulk file encryption. The…
What happened: Multiple cybersecurity outlets reported that the ShinyHunters group claimed control of infrastructure associated with the Cl0p ransomware operation’s leak site and used it to demand payment. The claims…
A PAYLOAD operation used malicious Group Policy Objects to disable defenses and disrupt a Windows domain without deploying a conventional ransomware encryptor.
SentinelOne linked North Korean group Jade Sleet to an Indian IT services compromise involving a DevOps engineer’s Mac and two Rust-based macOS backdoors.