Cisco Addresses Critical Vulnerabilities in SD-WAN and IOS XE Software
Cisco has released patches for multiple high-severity vulnerabilities affecting its Catalyst SD-WAN and IOS XE Software, including three flaws with a CVSS score of 9.8.
Category Security & Privacy
Ciberseguridad, vulnerabilidades y privacidad
New Zapscape KVM Vulnerability Poses Risk of Host Code Execution
A recently disclosed vulnerability in the Linux kernel, known as Zapscape, could enable attackers to escape KVM isolation and execute code on the host system from a guest virtual machine.
IBM’s Langflow AI Platform Faces Active Exploitation Due to Critical Vulnerability
A serious vulnerability in IBM's Langflow AI platform allows unauthorized remote code execution, prompting urgent action for affected users.
OpenAI Disrupts Poipet Scam Network Utilizing ChatGPT
OpenAI has taken action against a Cambodia-based scam network that exploited its ChatGPT technology for various fraudulent schemes, including investment and romance scams.
Over 250 ClickFix Domains Utilize Browser Fingerprinting for macOS Malware Delivery
A recent Microsoft Threat Intelligence report reveals that over 250 domains are employing browser fingerprinting techniques to deliver malware lures targeting macOS users.
AI-Generated Vulnerabilities Compromise CVE Integrity
Recent findings reveal that AI-generated reports of vulnerabilities have infiltrated the CVE pipeline, raising concerns about the reliability of security databases.
Google’s Agent Development Kit Exposes New Vulnerabilities
A recent discovery by Pillar Security highlights a significant vulnerability in Google's Agent Development Kit, enabling potential agent-on-agent exploitation.
Coldcard Hardware Wallet Vulnerability Linked to Major Bitcoin Theft
A significant flaw in Coldcard hardware wallets has been identified as the cause behind the theft of over $70 million in Bitcoin. The vulnerability stems from a firmware issue that affects the generation of cryptographic seeds.
Brinks Home Faces Data Breach After ShinyHunters Intrusion
Brinks Home has reported unauthorized access to its IT systems, with the hacking group ShinyHunters claiming to have stolen millions of records from its Salesforce instance.
Closed AI Models Hinder Linux Bug Investigation
A security researcher faced challenges using closed-source AI models while investigating a Linux kernel bug, ultimately relying on open-source alternatives.
