⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article describes how attackers used a SQL injection flaw to inject Java source code into an Oracle database. The database compiled and executed the code, giving them SYSTEM access on the underlying Windows server.
Security flaws in agent infrastructure from AWS, Google, and Vercel allowed attackers to bypass AI model authorization checks and directly trigger tools without model execution. The vulnerabilities affected Amazon Bedrock AgentCore's InvokeHarness API (CVE-2026-18830), Google's Agent Development Kit for Python (CVE-2026-18236), and Vercel's AI SDK harness packages for Codex and OpenCode agents.
This article covers CoreBreak, a pattern of vulnerabilities in agent infrastructure from AWS, Google, and Vercel. Attackers can forge tool calls that are executed without the model's authorization, bypassing security measures.
This article reports on a factory-shipped backdoor, named ENDLESSDOORS, found in over 20 Zbtlink router models. The implant, based on a tool called rctl, runs with root privileges and connects to a command-and-control server without any authentication, allowing attackers to execute commands or spawn a root shell.
This article reports on a factory-shipped backdoor, named ENDLESSDOORS, found in over 20 Zbtlink router models. The implant, based on a tool called rctl, runs with root privileges and connects to a command-and-control server without any authentication, allowing attackers to execute commands or spawn a root shell.
This article covers the sentencing of Maksim Silnikau, a Belarusian national, to 16 years in prison for operating the Ransom Cartel ransomware-as-a-service operation. Silnikau built the business around affiliates, providing locking software, stolen credentials, and a negotiation panel, while pushing payments through cryptocurrency mixers.