GoKawiil
React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable
(bleepingcomputer.com)
91.
92.
Fraudulent gambling network may actually be something more nefarious
(arstechnica.com)
93.
DPRK's 'Contagious Interview' Spawns Malicious Npm Package Factory
(darkreading.com)
94.
How Malware Authors Are Incorporating LLMs to Evade Detection
(darkreading.com)
95.
Hack the Hackers: 6 Laws for Staying Ahead of the Attackers
(darkreading.com)
96.
97.
Critical Fortinet FortiWeb WAF Bug Exploited in the Wild
(darkreading.com)
98.
99.
ClickFix Campaign Targets Hotels, Spurs Secondary Customer Attacks
(darkreading.com)
100.
5 reasons why attackers are phishing over LinkedIn
(bleepingcomputer.com)
101.
Dangerous runC flaws could allow hackers to escape Docker containers
(bleepingcomputer.com)
102.
Supply chain attacks are exploiting our assumptions
(news.ycombinator.com)
103.
How a ransomware gang encrypted Nevada government's systems
(bleepingcomputer.com)
104.
Multiple ChatGPT Security Bugs Allow Rampant Data Theft
(darkreading.com)
105.
Critical Cisco UCCX flaw lets attackers run commands as root
(bleepingcomputer.com)
106.
APT 'Bronze Butler' Exploits Zero-Day to Root Japan Orgs
(darkreading.com)
107.
Critical Site Takeover Flaw Affects 400K WordPress Sites
(darkreading.com)
108.
Europe Sees Increase in Ransomware, Extortion Attacks
(darkreading.com)
109.
110.
111.
On the Road Again: Hackers Hijack Physical Cargo Freight
(darkreading.com)
112.
China-linked hackers exploited Lanscope flaw as a zero-day in attacks
(bleepingcomputer.com)
113.
'TruffleNet' Attack Wields Stolen Credentials Against AWS
(darkreading.com)
114.
Why UUIDs won't protect your secrets
(news.ycombinator.com)
115.
116.
Why attackers are moving beyond email-based phishing attacks
(bleepingcomputer.com)
117.
118.
An attacker’s blunder gave us a look into their operations
(news.ycombinator.com)
119.
How An Attacker's Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
(news.ycombinator.com)
120.
6 browser-based attacks all security teams should be ready for in 2025
(bleepingcomputer.com)