Post · bonfire.cafe

@campuscodi@mastodon.social · 6 hours ago

-Shai-Hulud goes open-source
-Dream Market admin charged after major OPSEC failure
-France investigates Israeli disinfo firm
-Composer rushes to fix GitHub token leak
-Cisco patches zero-day
-Microsoft unveils MDASH AI
-Transit Finance hacked for $1.9m
-TAC hacked for $2.8m
-OpenAI impacted by TanStack incident
-Meta adds Incognito Chat to AI
-Debian makes reproducible builds mandatory
-Teenager convicted in Doentsk

Podcast: https://risky.biz/RBNEWS564/
Newsletter: https://news.risky.biz/risky-bulletin-shai-hulud-goes-open-source/

Risky.Biz

Risky Bulletin: Shai-Hulud goes open-source

In other news: Dream Market admin charged after major OPSEC failure; France investigates Israeli disinfo firm; Composer rushes to fix GitHub token leak.

https://risky.biz

Risky Bulletin: Shai-Hulud goes open-source

The source code for the Shai-Hulud worm has been released online, a dark web market admin was charged after a major OPSEC failure, France [Read More]

Catalin Cimpanu

@campuscodi@mastodon.social · 6 hours ago

-Chinese hacker extradited to South Korea for hacking celebs
-SIM farm disrupted in St Petersburg
-Scam compounded raided twice in six months
-KongTuke group switches to Teams phishing
-Tycoon2FA adopts device code phishing
-Node-ipc has another incident
-The Gentlemen leak exposes admins and affiliates
-OrBit rootkit returns
-Paper Werewolf develops custom Mythic implants
-Gammaredon continues WinRAR campaigns
-Deep dive into Doppelganger
-FamousSparrow targets Azerbaijan's oil and gas industry

Catalin Cimpanu

@campuscodi@mastodon.social · 6 hours ago

-New Kimsuky malware paleontology report
-Latest AI frontier models are closing on the cyber horizon
-PraisonAI attacks start after 3h
-FunnelKit exploitation
-AMD finds priv-esc bug in CPUs
-New Fragnesia Linux LPE
-New Apache Tomcat RCE
-New NGINX Rift vulnerability
-MCP server bugs
-Cisco lays off 5% of staff
-Akamai buys LayerX
-Microsoft releases AntiSSRF
-New Vulnerability.Garden tool