Breaking News
OpenSSH forwarded agent flaw enables remote code execution
CVE-2023-38408 in OpenSSH's forwarded ssh-agent can be chained into reliable RCE via shared library side-effects. Qualys confirms working PoCs.
▚Pierluigi Paganini
Banking sector
First Known Targeted OSS Supply Chain Attack on Banking Sector Found
Checkmarx uncovered npm-based supply chain attacks targeting banks with fake LinkedIn profiles and multi-stage infection chains using Confusion Framework.
Breaking News
CVE-2023-28771: Zyxel Firewall Flaw Powers Growing Mirai Botnets
Command injection in Zyxel devices (CVSS 9.8) being actively exploited by Mirai variants. 42,000+ exposed devices confirmed, real number expected…
Breaking News
Critical Citrix NetScaler Zero-Day Under Active Exploitation
CISA warns of attacks exploiting CVE-2023-3519 on NetScaler devices. Critical infrastructure targeted. Patch now.
APT
JumpCloud Breach Traced to North Korean APT, Crypto Firms Targeted
Security researchers link JumpCloud's supply chain compromise to North Korean state hackers targeting cryptocurrency companies.
Android
APT41 Deploys WyrmSpy and DragonEgg Android Spyware via Custom Tooling
Chinese APT group APT41 used two previously undocumented Android spyware, WyrmSpy and DragonEgg, with overlapping signing certificates and shared C2…
bot farm
Ukraine’s Cyber Police Dismantle 100-Strong Bot Farm Spreading Russian Disinformation
Ukraine's cyber police dismantled a 100+ member bot farm with 150,000 SIM cards and 250+ GSM gateways in three cities.
Breaking News
NetScaler CVE-2023-3519: live exploitation, patch list inside
Citrix flags CVE-2023-3519 under active attack on NetScaler ADC and Gateway. CVSS 9.8, unauth RCE. Affected versions and fix list.
Breaking News
WooCommerce Payments Flaw Under Mass Exploit — Patch Now
Attackers are mass-exploiting CVE-2023-28121 in WooCommerce Payments to hijack WordPress sites. Here is what defenders need to know.
Breaking News
Genesis Market is back: sold on criminal forums, relaunch next month
Genesis Market's admin sold the platform to a new operator. Browser fingerprints, cookies, and credentials come with the deal.
Artificial Intelligence
WormGPT: generative AI hands novice BEC attackers a working toolkit
SlashNext finds WormGPT on criminal forums. Uncensored LLM for phishing and BEC, plus Bard jailbreaks. What to watch.
Breaking News
North Star Public: Week 428 Threat Brief
Storm-0558 cloud token forgery, BlackLotus UEFI leak, AVrecon SOHO botnet, and Cl0p Russia-Ukraine reporting in a weekly security roundup.