⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Manifold Security discovered eight security flaws in seven command-line AI coding agents, including Claude, Codex, and Cursor, where a malicious .git configuration can execute attacker code on the developer's machine. The vulnerability exploits Git's core.fsmonitor setting, which runs a command when the agent performs background operations like git status or git diff.
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, from reducing exposure and detecting attacks to preserving recovery points and restoring operations quickly.
A Chinese-speaking cybercrime group called Gambling Goblin is installing malicious Apache modules on compromised Brazilian government and educational web servers. The modules reverse-proxy visitors to attacker-controlled pages that promote online gambling and sports betting, while the traffic still appears to originate from the legitimate domains.
A BGP hijack attack diverted Softaculous traffic to deliver a malicious Virtualizor update to some server installations. The attack occurred between August 28 and August 30, allowing attackers to establish persistent root-level access on compromised hypervisors.
Hackers reportedly gained access to payment accounts used by two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited payment card information.
Scammers are becoming more strategic about where they target people. Nine in ten toll scams—the fake unpaid-toll messages that threaten fines or license suspension—arrive by email or text, while roughly six in ten romance scams show up first on social media.