Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
A critical NULL pointer dereference flaw in libde265 could allow attackers to crash applications processing malicious video streams. Organizations using the library should apply patches immediately.
Read moreA ransomware affiliate stole profits while another attacker left tools exposed. These incidents reveal internal threats and poor security hygiene among cybercriminals.
Read moreFBI and international partners expose a Chinese cyber group targeting government, healthcare, and religious organizations. They used a custom portal to distribute stolen emails and exploited web application vulnerabilities.
Read moreMultiple high-severity flaws in libxml2 could allow attackers to crash applications or execute arbitrary code. Affects Ubuntu systems using XML parsing functionalities.
Read moreThe FBI has seized domains linked to Flax Typhoon, a China-backed APT group targeting U.S. critical infrastructure. This operation disrupted ongoing cyber intrusions and intelligence-gathering activities.
Read moreA critical server-side request forgery flaw in SonicWall SMA1000 appliances could let unauthenticated attackers probe internal networks. Four vulnerabilities were patched, with one scoring a maximum CVSS 10.0 severity rating.
Read moreA prolonged npm supply chain attack distributed malware through 12 packages, 8 of which were actively malicious. These packages delivered info stealers and remote access trojans to unsuspecting developers.
Read moreThreat actors compromised .gh, .sl, and .as domain registries to obtain fraudulent HTTPS certificates for Google services. This highlights risks in third-party certificate issuance and registry security.
Read moreMultiple vulnerabilities in Go's networking libraries impact HTTP/2 handling and HTML parsing, potentially enabling denial-of-service and cross-site scripting attacks.
Read moreThe tensorlake npm package was hijacked to distribute the Shai-Hulud worm, which steals credentials and executes remote code. Developers are urged to verify package integrity immediately.
Read more