1. A new Mirai based modular Linux botnet named Evooo1Bot is targeting internet facing gateway devices to turn them into SOCKS5 traffic relay nodes (bleepingcomputer.com).
2. Authorities in Brazil and Europe arrested seven individuals involved in a 30 million euro bank fraud scheme that exploited a service provider vulnerability to target Commerzbank customers (bleepingcomputer.com).
3. The NCSC warned that hackers are actively exploiting a macOS screen sharing authentication bypass vulnerability to deploy Monero miners (bleepingcomputer.com).
4. A maximum severity remote code execution vulnerability in SAP Commerce Cloud is currently being exploited in the wild just days after its disclosure (bleepingcomputer.com).
5. Oil giant Shell is investigating a potential security incident following claims by the Clop ransomware gang that they stole 89GB of data (bleepingcomputer.com).
6. The ShinyHunters extortion group compromised RingCentral in July, resulting in the theft of personal information from 1.6 million accounts (bleepingcomputer.com).
7. French authorities are investigating a data breach at the Directorate General of Public Finances that potentially impacted 600,000 individuals (therecord.media).
8. A Scottish government agency reported a data breach originating from a third party service provider that may have affected multiple other agencies (darkreading.com).
9. Researchers discovered a critical vulnerability in a widely used PostgreSQL extension that allowed for remote code execution across multiple managed database service providers (reddit.com).
10. An AI pentesting engine successfully bypassed a production AI agent prompt injection guardrail to extract the system prompt (reddit.com).
Be First to Comment