A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency’s operators gained access to the criminal’s operation’s backend and cut it off from those computers. “The next stepsRead More »Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden reasoning out in plain text, security firm Xint has shown. OpenAI’s reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encryptedRead More »OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that littleRead More »The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level ofRead More »Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers’ certificates with free ones from partners, thoughRead More »eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That’s a lot to deal with in just a few days. And the week isn’tRead More »ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

Linux servers running KSMBD, the kernel’s built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro’s Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires theRead More »Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company’s Cambridge Analytica data scandal, which came to light in 2018. According to multiple reports from the Associated Press, theRead More »Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

PHP, which is used in most major operating systems, has issued fixes for two critical vulnerabilities. Security leaders discuss.