LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker. The incident occurred […]
Tag: Featured
Attackers Exploit Third Arista VCO Zero-Day in Four Months
Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity […]
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
Prince of Persia, a threat group sponsored by the Iranian government, ran one of its command-and-control (C&C) servers from the United States this year, after […]
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Oracle has released its Critical Patch Update (CPU) for October 2026. The latest updates bring 1,295 new fixes across dozens of products. According to an […]
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP has rolled out patches for two critical-severity vulnerabilities named PHP2Shell that could provide attackers with unauthenticated remote code execution (RCE). The issues are tracked […]
‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
London- and New York-based Tracebit has developed a military style solution to AI attacks. Just as landmines are used to destroy or slow an advancing […]
Gravity Forms 3.2: New Repeater field and column layout options
We’re excited to announce the release of Gravity Forms 3.2, featuring the new Repeater field! The Repeater field lets you group any fields you like […]
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Siemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign. Siemens Software Center handles […]
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. Data for CyberSN’s jobs report is aggregated from JobSpikr […]
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As […]