This Week in Web Security: Exploits, AI Risks, and Unpatched Legacy Bugs
Attackers are using the same automated tools as defenders—but with malicious intent. Meanwhile, old vulnerabilities remain unpatched, creating persistent risks.
Read moreBlog
Security insights, vulnerability roundups, and updates from the Agent Breach team.
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
PipeWire Vulnerabilities Expose Ubuntu Systems to DoS Attacks
Ubuntu 24.04 LTS systems using PipeWire are vulnerable to denial-of-service attacks due to unbounded input handling flaws. Patches are available immediately.
Read moreModHeader Browser Extension Removed Over Hidden Data Collector
Google and Microsoft removed ModHeader from their stores after researchers discovered a dormant browsing history collector. Although inactive, the finding raises serious privacy concerns for over 1.6 million users.
Read moreCrashStealer macOS Malware Bypasses Gatekeeper via Notarized Dropper
A new macOS malware named CrashStealer uses a notarized dropper to bypass Apple's Gatekeeper security. It steals sensitive data after validating the user's login password.
Read moreShinyHunters Exploits OAuth to Breach Salesforce Environments for a Year
Attackers linked to ShinyHunters bypassed traditional exploits by leveraging pre-existing OAuth trust relationships. They accessed corporate Salesforce data without triggering platform vulnerabilities.
Read moreFake Microsoft Entra Passkey Phishing Targets M365 Users
Attackers use voice-based social engineering to trick users into enrolling fake passkeys. This grants unauthorized access to Microsoft 365 accounts for data extortion.
Read moreFree Android VPN Apps Expose User Traffic, Study Reveals
Research on 281 popular free Android VPNs reveals widespread privacy failures. Many apps leak traffic or transmit data unencrypted.
Read moreExposed Hacker Server Reveals Mass WordPress Backdoor Campaign
A misconfigured server exposed a cybercriminal operation targeting over 1.4 million WordPress sites. Researchers gained rare insight into the tools and methods used for large-scale website compromises.
Read moreScaling Asset Visibility: Lumen's Security Inventory Transformation
Lumen Technologies scaled its asset inventory from 17,000 to over 1.1 million items, revealing critical gaps in enterprise visibility. Accurate asset management is foundational for effective cybersecurity programs.
Read moreJoomla Extensions Exploited as Zero-Days Added to CISA KEV Catalog
Two critical Joomla extensions, iCagenda and Balbooa Forms, are under active exploitation as zero-days. CISA has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.
Read more