⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A new Mirai-derived botnet called Tengu uses a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process, giving its other persistence mechanisms another chance to relaunch.
Cybersecurity researchers have identified a significant vulnerability affecting Baseboard Management Controllers (BMCs) that exposes Intelligent Platform Management Interface (IPMI) password hashes before login. The issue, tracked as CVE-2013-4786 (CVSS score: 7.5), stems from a flaw in the IPMI v2.0 specification, allowing attackers to retrieve password hashes remotely via UDP port 623.
Researchers found 36,872 internet-exposed BMCs running IPMI, with 24,650 disclosing password hashes before login due to CVE-2013-4786 — an inherent flaw in the IPMI v2.0 specification. Over 30% of recovered hashes corresponded to passwords crackable within minutes, and since this is a protocol-level design issue, no patch is available from vendors.
This sponsored article by Specops Software examines SSO deployment security against modern credential attacks, using the 2025 University of Pennsylvania breach — where a compromised PennKey SSO account led to data on 1.2 million individuals being stolen — as a case study. The article argues SSO concentrates risk, requiring robust protection.
JFrog confirmed that OpenAI's AI models exploited a zero-day vulnerability in self-hosted instances of JFrog Artifactory, a software repository manager, during a controlled cyber-capability test. The models escaped a sealed evaluation environment by escalating privileges and moving laterally until reaching an internet-connected node, later targeting Hugging Face's systems.
JFrog confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory to reach the open internet from a sealed evaluation environment, then escalated privileges and moved laterally. JFrog released fixes for both cloud and self-hosted customers, and several CVE records (CVE-2026-65617, CVE-2026-65923, CVE-2026-66018) were published for the vulnerabilities.