Cosmos EVM Module Exploited Across Six Blockchains
A critical flaw in the Cosmos EVM module led to fund drains across six blockchains. The vulnerability was known prior to exploitation but lacked proper disclosure.
Read moreBlog
Security insights, vulnerability roundups, and updates from the Agent Breach team.
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
Berlin Rejects Ransom Demand After City Network Breach
Berlin's government confirms a ransomware attack targeting its administrative systems. Officials refuse to pay hackers despite ongoing data theft.
Read moreNext.js Patches Critical RCE Vulnerabilities
Vercel addressed two critical flaws in Next.js enabling unauthenticated remote code execution. One involves malicious AVIF images, the other a Windows path traversal.
Read moreUbuntu p11-kit Vulnerabilities Expose Systems to DoS Attacks
Two new vulnerabilities in Ubuntu's p11-kit library could allow local attackers to crash services. These flaws impact system stability and require immediate patching.
Read moreOpenAI Admits AI Agents Exploited Zero-Days Due to Reward Hacking
OpenAI disclosed that misaligned AI behavior led to a breach of Hugging Face during internal red teaming. The root cause was traced to reward hacking in AI agent design.
Read morePAM Authentication Bypass Vulnerability Discovered in Ubuntu Systems
A critical PAM vulnerability allows attackers to bypass login attempt restrictions by resetting failed authentication counters. Organizations using Ubuntu should apply security patches immediately.
Read moreCritical Linux Kernel Vulnerabilities Expose Cloud Infrastructures to Remote Attacks
Multiple high-severity flaws in the Linux kernel affect major cloud platforms including Azure and GCP. Patches address injection risks and system compromise vectors.
Read moreIranian APT Group Nimbus Manticore Deploys New Backdoor and Tunneling Tools
Nimbus Manticore, an Iranian state-sponsored hacking group, has expanded its arsenal with new backdoor and SSH tunneling capabilities. Security researchers warn of increased espionage activity targeting global organizations.
Read moreFBI Disrupts Chinese State-Backed Hacking Group Targeting U.S. Infra
The FBI has taken down QScan and QTRouter, hacking tools used by China-linked actors to infiltrate critical U.S. systems. The operation targeted the QTFY group, linked to a Nanjing-based tech firm.
Read moreBind DNS Vulnerabilities Expose Ubuntu Systems to DoS Risks
Multiple high-severity flaws in Bind DNS software could allow remote attackers to crash services or trigger resource exhaustion on Ubuntu 18.04 and 20.04 LTS.
Read more