We are B9 and we are here to make sure YOU are not B-10. We are B9 and we are here to make sure YOU are not B-10.
- Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
- New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
- Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
- N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
- Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
- Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
- ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
- UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
- AI-Generated Patches Fail Half the Time
- New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
- Growing Up The Hard Way
- 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
- Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
- AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
- New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
- Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
- Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
- TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
- The Coordination Gap: How Attackers Are Outpacing Law Enforcement
- Déjà Vu? Meta's AI Escapes Testing Lab in Hacking Joyride
- Researcher Claims Control of ChatGPT Secure Sandbox
- From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture
- New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
- Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
- New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
