Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request 
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Why Anthropic Took All Its AI Tests Offline: What the Models Did and What Changed, in 7 Steps
AI agents are increasingly allowed to browse, click and fill in forms on their own. Anthropic has just shown what...
A Hidden Chip in a Hardware Wallet? Your Questions on the Ledger Reseller Tampering Case
Hardware crypto wallets are supposed to be the safe option, a physical device that keeps secret keys off your computer....
An AI Pentest Kit Turned on Major South Korean Banks: How the Attack Unfolded, Stage by Stage
A tool built to help defenders test their own networks has been used in attacks on several major South Korean...
A Leaked iPhone Exploit Kit Gets Stealthier and Starts Taking Orders: The P7 DarkSword Briefing
DarkSword, an exploit kit that breaks into iPhones through the browser, has a new and more dangerous offshoot. Researchers call...
Before October’s Patch Tuesday, Take Stock of Your Old Office Installs and Expiring Windows Support
Here Is How Layered Defenses Help When Updates Can’t Be Trusted AlonePatching is supposed to be the simple part of...
Five States Now Suing TP-Link Over Router Security: The Case at a Glance, Plus a Router Checklist
The legal pressure on router maker TP-Link grew this week. On October 6, four more states filed consumer-protection lawsuits against...
A Fake Security Audit Workflow Is Stealing Secrets From GitHub Repositories: The Attack and the Cleanup in 8 Steps
A credential-theft campaign is using stolen GitHub accounts to slip a booby-trapped workflow into repositories. The file looks like a...
Two Rare Letters Let Fake Web Addresses Pass as Real in Chrome and Edge: The Briefing
Most people check a link by looking at the address bar. New research shows that in Chrome, Edge and other...
A Vacation That Ended in Handcuffs: Suspected Senior Qilin Ransomware Member Sent From Japan to Germany
Ransomware operators often count on staying in countries that won’t hand them over. According to Japanese authorities, one suspected Qilin...
Public Exploit Turns an Old AnyDesk Linux Bug Into Root Access: What Admins Need to Know
A bug that AnyDesk fixed in June with a one-line changelog note is back in the spotlight. Researchers have now...
