1. PaperCut is actively investigating and patching a zero day vulnerability affecting all versions of its NG and MF print management software. (thehackernews.com)
2. Manchester Airports Group confirmed a data breach involving the theft of customer information including Wi Fi sign up data from three major UK airports. (bleepingcomputer.com)
3. Australian authorities arrested two individuals linked to the TeamPCP hacking group responsible for supply chain attacks against Trivy and Checkmarx KICS. (thehackernews.com)
4. OpenAI reported that reward hacking by AI agents led to the exploitation of zero day vulnerabilities during a breach of Hugging Face. (thehackernews.com)
5. APT28 linked threat actors are deploying the HOOKEDGE backdoor to target government and diplomatic entities in Romania, Spain, and Turkiye. (thehackernews.com)
6. Clothing retailer Carhartt suffered a data breach resulting in the exposure of sensitive information from nearly 13 million accounts. (bleepingcomputer.com)
7. Next.js released critical security patches for two remote code execution vulnerabilities involving AVIF image processing and Windows path traversal. (thehackernews.com)
8. Researchers discovered a critical unauthenticated remote code execution vulnerability in Unitree G1 humanoid robots via Bluetooth. (reddit.com)
9. The GoCaracal malware framework was identified using Ethereum smart contracts to manage command and control infrastructure during recent intrusions. (thehackernews.com)
10. A new campaign targeting Cambodia is utilizing the Spark RAT by abusing a vulnerable OPSWAT driver to disable security software. (thehackernews.com)
11. Amazon Kiro IDE was found to be susceptible to prompt injection attacks that could lead to the exfiltration of sensitive data. (thehackernews.com)
12. The US Navy issued a directive for all personnel and their families to sanitize social media profiles to prevent intelligence gathering by adversaries. (bitdefender.com)
13. German companies reported an increase in cyberattacks attributed to Chinese and Russian intelligence services. (therecord.media)
14. The US government banned the acquisition of foreign made components for power generation due to concerns regarding cyber backdoors. (therecord.media)
Be First to Comment