cyberintel.kalymoon.com · 42859 articles · updated every 4 hours · grows forever
A vulnerability was found in Uutils coreutils . It has been declared as problematic . The impacted element is an unknown function of the component Split Utility . Such manipulation leads to time-of-ch…
A vulnerability was found in DDEV up to 1.25.1 . It has been rated as critical . This affects the function Untar/Unzip of the file pkg/archive/archive.go . Performing a manipulation results in path tr…
A vulnerability categorized as problematic has been discovered in ericc-ch copilot-api up to 0.7.0 . This impacts an unknown function of the file /token of the component Header Handler . Executing a m…
A vulnerability identified as critical has been detected in ByteDance verl up to 0.7.0 . Affected is the function math_equal of the file prime_math/grader.py . The manipulation leads to sandbox issue.…
A vulnerability labeled as critical has been found in Beghelli SicuroWeb . Affected by this vulnerability is an unknown functionality of the component Content Security Policy Handler . The manipulatio…
A vulnerability marked as critical has been reported in Beghelli SicuroWeb 1.5.2 . Affected by this issue is some unknown functionality. This manipulation causes use of unmaintained third party compon…
A vulnerability described as critical has been identified in Dell PowerProtect Data Domain up to 7.13.1.60/8.3.1.10/8.6 . This affects an unknown part. Such manipulation leads to stack-based buffer ov…
A vulnerability classified as problematic has been found in Apple iOS and iPadOS up to 18.7.7/26.4.1 . This vulnerability affects unknown code of the component Notifications Handler . Performing a man…
Read how Microsoft is partnering with Anthropic and broader industry to use leading models, paired with our platforms and expertise, to turn AI-driven discovery into protection at scale. The post AI-p…
Nation-State Hits Now Comprise Majority of Serious Incidents Probed by Government British intelligence officials said they investigate about four major incidents per week, with the majority involving …
AI Enthusiasts Haven't Used Model to Probe for Vulns, Source Tells Bloomberg An unauthorized group of users gained access to Claude Mythos Preview artificial intelligence model and have regularly used…
Nine out of ten cyber attacks start with phishing. When an incident occurs, it’s often a person who’s held accountable: a compromised employee or a SOC analyst who missed a signal. But in a corporate …
A previously undocumented remote access trojan (RAT) framework called Auraboros C2 has surfaced, exposing an alarming level of open access to victim data, live surveillance capabilities, and browser c…
Anthropic’s latest frontier AI model, Claude Mythos Preview, has identified a staggering 271 zero-day vulnerabilities in Mozilla Firefox marking a seismic shift in AI-powered cybersecurity defense. Th…
A North Korea-linked threat group is quietly getting hired by real companies. Jasper Sleet, a threat actor tied to North Korea, has been building fake professional identities and using them to land le…
A newly discovered malware called Lotus Wiper has been used in a targeted destructive attack against the energy and utilities sector in Venezuela. Unlike ransomware, this threat does not ask for money…
Organized fraud networks are now using a new method to move stolen money in France. They create fake business accounts on freelancer fintech platforms and use those accounts as mule accounts to launde…
macOS LOTL techniques bypass detection using native tools and metadata abuse
Developers are advised to check their applications after Microsoft revealed that last week’s ASP.NET Core update inadvertently introduced a serious security flaw into the web framework’s Data Protecti…
France Titres, a French government agency, has disclosed a data breach that may have exposed user data from its online portal. France Titres, also known as the Agence nationale des titres sécurisés (A…
Security and data governance are among the key considerations in Google’s latest AI update, which introduces Workspace Intelligence within Google Workspace. Google describes the feature as “a secure, …
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen developer npm tokens. The supply …
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket reve…
A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one variant implementing Kyber1024 post-quantum encryption. [...]