Topic

Data breaches

29 stories

Arista patches actively exploited VeloCloud zero-day

Arista Networks released security updates to fix a critical SQL injection flaw in VeloCloud Orchestrator that is being actively exploited.

ITOct 25, 10:15 AM UTC3 sources

Researchers disable vulnerable Popcorn Time updater on millions of devices

Eye Security researchers remotely disabled a vulnerable updater for the abandoned Time4Popcorn app on millions of devices to prevent potential code execution attacks.

ITOct 25, 10:15 AM UTC3 sources

LiteLLM supply chain attack delivers credential stealer

A compromised LiteLLM release distributed malware that steals cloud credentials and private keys.

ITOct 25, 10:15 AM UTC5 sources

OpenAI trains frontier models offline after security breaches

OpenAI has stopped connecting its frontier AI models to the live internet during training following a series of security incidents.

AIOct 25, 10:15 AM UTC4 sources

BlackX UEFI bootkit targets Central Asian diplomatic groups

Kaspersky attributes the BlackX UEFI bootkit campaign to APT41, noting it exploits a vulnerability to bypass Secure Boot on patched systems.

ITOct 25, 10:15 AM UTC2 sources

OpenAI-led coalition fixes PHP2Shell bug after early leak

OpenAI led a two-month effort to fix critical PHP vulnerabilities that allowed unauthenticated code execution, prompting governments to take websites offline.

ITOct 25, 10:15 AM UTC4 sources

Ethereum delays Glamsterdam testnet upgrade over gas security risks

Ethereum developers postponed the Glamsterdam upgrade on the Hoodi testnet after researchers identified security risks related to gas changes.

CryptoOct 25, 10:15 AM UTC4 sources

PHP patches critical RCE flaws as exploit attempts surge

PHP released an emergency update to fix two critical vulnerabilities allowing unauthenticated remote code execution, following widespread exploitation attempts.

ITOct 25, 10:15 AM UTC11 sources

Bitcoin Core Ends Embargoes for AI-Discoverable Bugs

Bitcoin Core updated its security policy to immediately patch vulnerabilities that can be easily found using large language models.

CryptoOct 25, 10:15 AM UTC4 sources