Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
German and US authorities dismantled the Kratos phishing kit, widely used to steal Microsoft 365 sessions and bypass MFA. An Indonesian developer has been arrested in connection with the operation.
Read moreMultiple flaws in Ubuntu's libde265 library could allow attackers to crash systems via malformed media files. All issues affect Ubuntu 22.04 LTS and require immediate patching.
Read moreUbuntu addresses nginx stability issues after a recent security patch caused unexpected module compatibility problems. A critical vulnerability fix has been temporarily rolled back.
Read moreMultiple vulnerabilities in ImageMagick affect several Ubuntu LTS versions, potentially allowing denial of service or arbitrary code execution.
Read moreA critical sandbox escape vulnerability in ServiceNow's AI Platform is being actively exploited by threat actors. Organizations using the platform should take immediate action to patch and monitor for signs of compromise.
Read moreAttackers are now targeting AI infrastructure with ransomware that encrypts models and datasets. The campaign leverages a known Langflow RCE vulnerability for initial access.
Read moreA new threat actor exploited undisclosed SonicWall SMA vulnerabilities before public disclosure. These zero-day exploits granted root access to enterprise VPN appliances.
Read moreUAC-0145 deploys ClickFix CAPTCHA lures to deliver malware to Ukrainian systems. The campaign exploits user trust in familiar security prompts.
Read moreA newly patched NGINX vulnerability allows unauthenticated attackers to crash worker processes or potentially execute remote code. Organizations running outdated versions should upgrade immediately.
Read moreA new supply chain attack called SleeperGem uses compromised RubyGems packages to target developer machines. The campaign highlights growing risks in open-source ecosystems.
Read more