Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was blamed on and claimed by TeamPCP, the threat actor behind multiple open source software (OSS)… Read More "Trivy, Not LiteLLM Behind the 2,500 Org Compromise"
Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco said. ShinyHunters has been particularly active this year,… Read More "Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks"
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
A new modular Linux botnet family based on publicly leaked source code from the Mirai botnet has been linked to exploitation attempts for several vulnerabilities in edge devices. A Taiwan-based security researcher at Fortinet’s FortiGuard Labs, Yi Ping (Cara) Lin,… Read More "New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies"
CVE Explained: How Vulnerabilities Are Named and Scored
Common Vulnerabilities and Exposures (CVE) is a list of publicly disclosed information security vulnerabilities and exposures. CVE was launched in 1999 by the MITRE corporation to identify and categorize vulnerabilities in software and firmware. CVE provides a free dictionary for… Read More "CVE Explained: How Vulnerabilities Are Named and Scored"
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities"
How to reduce cybersecurity backlogs and fix vulnerability debt
An increasing backlog indicates a failure in the operating model Security teams often become the default owners of any issue labeled as a security concern. For example, when a scanner identifies an outdated package, security is expected to patch the… Read More "How to reduce cybersecurity backlogs and fix vulnerability debt"
Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility
The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less 13 Aug 2026 • , 4 min. read Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that… Read More "Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility"
Novel macOS Infostealer AmnesiaStealer Spread via ClickFix
A new macOS infostealer is being distributed via ClickFix social engineering attacks, researchers from Jamf have warned. The Rust infostealer, dubbed AmnesiaStealer, has multiple stages and objectives once it has infected a victim device, including harvesting credentials, browser data and… Read More "Novel macOS Infostealer AmnesiaStealer Spread via ClickFix"
SMB Ports 445 and 139: Risks and How to Secure Them
The Server Message Block Protocol (SMB Protocol) is a client-server communication protocol used for sharing access to files, printers, serial ports, and data on a network. It can also carry transaction protocols for authenticated inter-process communication. In short, the SMB… Read More "SMB Ports 445 and 139: Risks and How to Secure Them"
1.6 Million Likely Impacted by RingCentral Data Breach
The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group. The incident occurred in July and was the result of a “sophisticated social engineering campaign”,… Read More "1.6 Million Likely Impacted by RingCentral Data Breach"