16 Typosquatted RubyGems Steal Credentials and Crypto Wallets Introduction What happens when a developer makes a one-character mistake while installing a RubyGem? In a typosquatting attack, that small error can be enough to bring malicious code inside your development environment and expose credentials, cryptocurrency wallets, or other sensitive data. According Read more…
SafePal Data Breach Exposes Nearly 40,000 Customers Introduction For a hardware wallet company, customer data can be almost as sensitive as the assets its products are designed to protect. SafePal is dealing with that reality after disclosing a security incident that reportedly exposed information belonging to nearly 40,000 customers. According Read more…
CISA Warns of Actively Exploited Ray Browser RCE Flaw A browser vulnerability becomes a very different security problem once attackers begin exploiting it in the wild. At that point, the question for security teams is no longer whether a proof of concept might eventually become useful to adversaries. It is Read more…
Critical GitLab GraphQL Flaw Enables Public Project Deletion A public GitLab project is supposed to be public to read, clone, and collaborate on—not public to delete. Yet a critical GitLab GraphQL flaw shows how a weakness at the API authorization layer can turn ordinary external access into a serious availability Read more…
Snowflake GitHub Actions Flaw Enables Command Injection Introduction What if a routine pull request could turn your trusted CI/CD workflow into a path for arbitrary command execution? That is the risk highlighted by a recently reported Snowflake GitHub Actions flaw involving unsafe handling of attacker-controlled input. According to The Hacker Read more…
VMware Exploits Windows 0-Day and MCP Attacks Weekly Recap A single unpatched virtualization host can expose dozens of workloads. A Windows zero-day can turn an ordinary endpoint into an entry point for deeper compromise. And as organizations connect AI assistants to internal tools through Model Context Protocol (MCP), attackers are Read more…
How MCP Servers Expose Enterprise Secrets and Sensitive Data Introduction What happens when an AI assistant can do more than answer questions—when it can search internal repositories, query databases, access cloud services, read files, or invoke business applications on an employee’s behalf? That is the promise of the Model Context Read more…
Evooo1Bot Exploits Linux Edge Devices for SOCKS5 Proxies Introduction What happens when an internet-facing Linux appliance that nobody has touched in months becomes somebody else’s proxy server? That is the risk highlighted by Evooo1Bot, a Linux botnet campaign targeting exposed edge devices and turning compromised systems into SOCKS5 proxies. According Read more…
Hackers Exploit SharePoint Authentication Bypass After PoC Release **Introduction** How much time does your security team have between a vulnerability becoming public and attackers putting it to work? In the case of a SharePoint authentication bypass, the answer can be uncomfortably short. Once technical details and proof-of-concept (PoC) exploit code Read more…
Lazarus Exploits Windows Zero-Day to Deploy SYSTEM Backdoor Introduction What happens when an attacker does not need to steal an administrator password because Windows itself provides a path to SYSTEM privileges? That is the risk highlighted by reporting on Lazarus Group exploiting a Windows zero-day to deploy a highly privileged Read more…
