Waper
Use on the web

Cybersecurity

Major breaches and actively exploited vulnerabilities, threat research worth reading, and the policy and business moves in security.

  • Official
  • Public
  • 0 followers
Sign up to followCustomize it
  1. Tue, Nov 38 itemsA hijacked security-tool update channel delivered backdoors to Linux servers, while active exploitation hit Siemens industrial devices, Node-RED and Synology NAS systems. Other major developments include a breach affecting over 1.3 million people and a cyberattack on Brazil’s largest cryptocurrency exchange.
  2. Mon, Nov 26 itemsGoogle and partners disrupted a 1.3 million-device Android botnet, while active attacks continued against Ivanti gateways, GitLab servers and outdated BTCPay Server installations. New developments included Binance theft tracing and Polymarket’s reimbursement pledge.
  3. Sun, Nov 15 itemsThe FBI attributed the Binance crypto theft to North Korea-linked TraderTraitor, while a hijacked third-party script cost Polymarket traders about $2.7 million. Alpine Linux rebuilt its GitLab server after an attempted exploit, and newly detailed vulnerabilities affect Canonical infrastructure and Android phones.
  4. Sat, Oct 318 itemsActive exploitation of Ivanti Connect Secure flaws and a remote-root Linux kernel vulnerability lead this edition. Northflank and Chainalysis disclosed breaches, while OpenAI fixed a flaw that could expose private ChatGPT conversations.
  5. Fri, Oct 308 itemsBinance reported a $6.3 billion theft, while Florida disclosed a financial-aid breach exposing 4.9 million people’s Social Security numbers. A compromised coding extension and active exploitation of GitLab, Drupal and PHP flaws add immediate priorities for security teams.
  6. Thu, Oct 296 itemsActive exploitation of Cisco firewall, PHP and Brotli vulnerabilities makes patch prioritization urgent. Major data exposures affected DHS personnel and Sony ISP customers, while a cyberattack forced Moldova to take more than 80 public services offline.
  7. Wed, Oct 288 itemsCISA confirmed active exploitation affecting Brotli and Adobe Commerce, while a Sony subsidiary disclosed a breach involving approximately 2.5 million customer records. Other major developments include widespread public-service disruption in Moldova and new details of PHP2Shell attacks.
  8. Tue, Oct 276 itemsApple extended patches for an actively exploited flaw to older devices, while CISA confirmed exploitation of two PHP2Shell vulnerabilities. Australia also reported disrupting a criminal's access to 180,000 Amadey-infected computers.
  9. Mon, Oct 265 itemsLarge-scale compromises affected online stores, Microsoft 365 accounts and developer repositories. PHP also rebuilt its Windows packages to address a Brotli flaw that could permit code execution.
  10. Sun, Oct 251 itemA researcher disclosed unpatched Tailscale SSH flaws that could let an attacker turn control of one device into root access on other reachable servers, under specific configurations.
  11. Fri, Oct 235 itemsA supply-chain compromise gave a ransomware group access to around 40 shipping companies, while exploitation of the recently disclosed PHP2Shell flaws has begun. New research also examines credential theft through LiteLLM and low-cost attacks using AI models.
  12. Thu, Oct 225 itemsCompromised eMudhra certificate-authority keys threaten TLS trust, while Microsoft linked a ConnectWise supply-chain attack affecting more than 2,200 tenants to a China-linked actor. PHP maintainers also issued urgent fixes for two critical vulnerabilities that could allow unauthenticated remote code execution.