AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Researchers found eight malicious packages on the npm registry that were downloaded 40,767 times before being removed, spreading the Overlord remote access trojan and an information stealer. The packages targeted JavaScript developers through a compromised open-source supply chain, giving attackers remote control of infected machines and access to stolen credentials. It underscores the persistent risk that widely used package registries pose to software supply chains.
SonicWall has released patches for a maximum-severity pre-authentication server-side request forgery flaw in its SMA1000 secure remote access appliances. The vulnerability has a CVSS score of 10.0, meaning it could potentially be exploited without credentials and poses serious risk to affected networks. Administrators should apply the updates immediately.
Security researchers report that a malware family dubbed PoeLLM has compromised more than 3,400 servers, conscripting them into a cryptocurrency mining botnet. The campaign spreads to new hosts to expand the network's mining capacity, straining victims' computing resources. It highlights the ongoing risk to poorly secured servers from financially motivated attackers.
The hacking group ShinyHunters extorted a company spun off from Boeing, according to reporting by Krebs on Security. The extortion took place before arrests were made in connection with the group's activities. The case highlights the growing pressure on airlines and aerospace suppliers from data-theft and extortion crews.
The sixth Voice of the CISO report indicates that cyber risk is increasingly embedded in everyday business workflows rather than only at network perimeters. The findings highlight how security leaders must adapt controls and governance to protect data and operations within the tools employees use daily.
The FBI says the "FortiBleed" campaign remains active after attackers collected 86,644 sets of credentials for Fortinet network devices, including firewalls and VPN gateways. Stolen credentials let intruders breach corporate and government networks, underscoring an ongoing, unpatched risk for organizations relying on Fortinet gear. Administrators are urged to rotate passwords, enable multi-factor authentication, and apply available patches.
Attackers began exploiting a vulnerability in Atlassian Data Center products just two hours after technical details became public, according to The Hacker News. The speed of the attacks highlights how quickly criminals weaponize newly disclosed flaws in widely deployed enterprise software, leaving little time for organizations to patch. Admins running affected Atlassian Data Center instances should apply fixes or mitigations immediately.
The Hacker News published an explainer on agentic pentesting, covering what AI-driven security testing can demonstrate and where its capabilities stop. It matters as organizations evaluate autonomous tools for vulnerability discovery and cybersecurity assessments.
Security expert Bruce Schneier examines Apple's system for attaching cryptographic proof of origin to photos taken on iPhones, so images can be verified as coming from a real device and not altered. Such provenance tools could help counter AI-generated fakes, but also raise privacy and surveillance concerns about tracking who took what.