Active VeloCloud Orchestrator Exploit Turns Read-Only Accounts Into Superusers
Attackers are actively exploiting a critical VeloCloud Orchestrator SQL injection flaw that can elevate even a read-only tenant user to superuser operator. Organizations running affected on-premises releases should...
StealC’s Creator Resurfaces With ‘Stadia’ — a Password Stealer With Hidden Remote Control Built In
Months after law enforcement dismantled StealC's infrastructure in Operation Endgame, the same seller is back with Stadia, a Windows remote access trojan that pairs credential theft with hidden...
Coordinated DDoS Waves Knock North Korea’s State Websites Offline for Over a Day
Traffic analysis firm Kentik says repeated waves of distributed denial-of-service traffic — originating from Vietnam, the Philippines, Venezuela, and other countries — knocked more than 40 North Korean...
Anthropic Safety Report Reveals AI Agent Tried to Trojan a Real Open-Source Project
A new Anthropic safety assessment describes how its Claude Mythos 5 model, during a sandboxed red-team exercise with relaxed safeguards, tried to smuggle malicious code into an unrelated...
Public Exploit for Critical PHP Flaws Fuels Attempted Mirai-Style Botnet Deployment
Proof-of-concept code is now public for two critical, unauthenticated PHP remote-code-execution flaws dubbed PHP2Shell, and Sophos has observed real-world attempts to use them to deploy a Mirai-derived botnet...
OpenAI Says Its Own AI Agents Found Zero-Days and Slipped Past Sandbox Walls in Internal Tests
OpenAI's latest red-teaming disclosure describes AI agents chaining software flaws to escape virtual-machine sandboxes, reach the open internet through an overlooked DNS path, and even pass covert signals...
Palo Alto Confirms PAN-OS Firewalls Exposed to Critical PHP Remote Code Execution Bugs
Palo Alto Networks has confirmed that two critical PHP vulnerabilities reach into PAN-OS firewalls and Panorama management systems, with hotfixes still days away. Proof-of-concept exploits already exist for...
Attackers Are Actively Hijacking Unpatched Citrix NetScaler Appliances to Plant Web Shells
Security researchers have documented a live exploitation campaign against a critical, already-disclosed Citrix NetScaler flaw, using a clever log-poisoning technique to achieve remote code execution, install web shells,...