Inside the Supply Chain Playbook Turning Trusted Software Updates Into Credential Thieves
A new ReversingLabs report ties together the S1ngularity, Shai-Hulud, and TeamPCP/Trivy supply chain incidents, showing how stolen maintainer tokens and compromised CI pipelines let attackers push credential-stealing code...
Red Hat Satellite Authorization Flaw Can Expose Root Passwords and Enable Code Execution
Red Hat has patched a CVSS 9.1 authorization flaw in Satellite's Foreman component that lets low-privileged users view protected host data, potentially including root passwords. Unsafe Safemode configurations...
Attackers Abuse SQL Server as a Covert Command and Exfiltration Channel
Investigators found attackers using Microsoft SQL Server functionality to execute Windows commands and return stolen files through query output. An exposed staging server also leaked the intruders' toolkit...
Dell Storage Module Flaws Expose Kubernetes Environments to Admin Takeover
Dell has fixed multiple critical flaws in its Container Storage Modules, including two CVSS 10 vulnerabilities reachable without authentication. Attacks could expose array credentials, bypass tenant controls and...
GitLab AI Gateway Sandbox Escape Opens Door to Remote Command Execution
GitLab has patched a CVSS 9.9 sandbox escape in self-hosted AI Gateway deployments. An authenticated Duo Agent Platform user could abuse crafted flow templates to execute commands on...
Apache HTTP Server 2.4.69 Fixes 20 Flaws Across CGI, WebDAV and Proxy Modules
Apache HTTP Server 2.4.69 addresses 20 vulnerabilities that can cause code execution, memory corruption, crashes, data exposure or authentication problems under particular configurations. Administrators should upgrade, but risk-based...
Antino Backdoor Hides Its Entire Command Channel Inside Microsoft 365
A China-linked espionage campaign has deployed a Rust backdoor whose native command-and-control workflow runs through Outlook and OneDrive. Cisco Talos found roughly 350 compromised endpoints across eight countries,...
Warlock Ransomware Turns SharePoint Servers Into Gateways to Essential Services
A China-linked operator is exploiting on-premises SharePoint flaws to deploy Warlock ransomware across water, telecom, government and education organizations. Recent intrusions show how web shells, stolen machine keys,...