Information Security
16 Typosquatted RubyGems Steal Credentials and Crypto Wallets
16 Typosquatted RubyGems Steal Credentials and Crypto Wallets Introduction What happens when a developer makes a one-character mistake while installing …
Information Security
SafePal Data Breach Exposes Nearly 40,000 Customers
SafePal Data Breach Exposes Nearly 40,000 Customers Introduction For a hardware wallet company, customer data can be almost as sensitive …
Information Security
CISA Warns of Actively Exploited Ray Browser RCE Flaw
CISA Warns of Actively Exploited Ray Browser RCE Flaw A browser vulnerability becomes a very different security problem once attackers …
Information Security
Critical GitLab GraphQL Flaw Enables Public Project Deletion
Critical GitLab GraphQL Flaw Enables Public Project Deletion A public GitLab project is supposed to be public to read, clone, …
Information Security
Snowflake GitHub Actions Flaw Enables Command Injection
Snowflake GitHub Actions Flaw Enables Command Injection Introduction What if a routine pull request could turn your trusted CI/CD workflow …
Information Security
VMware Exploits Windows 0-Day and MCP Attacks Weekly Recap
VMware Exploits Windows 0-Day and MCP Attacks Weekly Recap A single unpatched virtualization host can expose dozens of workloads. A …
Information Security
How MCP Servers Expose Enterprise Secrets and Sensitive Data
How MCP Servers Expose Enterprise Secrets and Sensitive Data Introduction What happens when an AI assistant can do more than …
Information Security
Evooo1Bot Exploits Linux Edge Devices for SOCKS5 Proxies
Evooo1Bot Exploits Linux Edge Devices for SOCKS5 Proxies Introduction What happens when an internet-facing Linux appliance that nobody has touched …
Information Security
Hackers Exploit SharePoint Authentication Bypass After PoC Release
Hackers Exploit SharePoint Authentication Bypass After PoC Release **Introduction** How much time does your security team have between a vulnerability …
Information Security
Lazarus Exploits Windows Zero-Day to Deploy SYSTEM Backdoor
Lazarus Exploits Windows Zero-Day to Deploy SYSTEM Backdoor Introduction What happens when an attacker does not need to steal an …
