GitHub Action tj-actions/changed-files was compromised in supply chain attack Pierluigi Paganini March 18, 2025 The GitHub Action tj-actions/changed-files was compromised, enabling attackers to extract secrets…
Cobalt Strike has released version 4.11 with significant improvements to its evasion capabilities, making the popular red team tool more resilient against modern security solutions. …
A new extension for Burp Suite has been released, integrating the powerful secret scanning capabilities of TruffleHog. This innovative integration aims to enhance the detection…
Thank you for joining! Access your Pro+ Content below. 18 March 2025 UK under-prepared for catastrophic cyber attack Share this item with your network: In…
Cryptocurrency exchange OKX has temporarily suspended its decentralized exchange (DEX) aggregator service following allegations that North Korea’s state-sponsored Lazarus Group exploited it to launder funds…
Pressure to plan for artificial intelligence (AI) projects has led IT leaders to keep data that might only be used once and increased the prevalence…
Security researchers have publicly released a proof-of-concept (PoC) exploit for CVE-2024-36904, a critical use-after-free vulnerability in the Linux kernel that has remained undetected for seven…
The FBI has issued an urgent warning about the rising threat of malicious file conversion tools that are being used to spread malware across the…
In a massive security breach discovered this week, approximately 23,000 GitHub repositories have been compromised in what security experts are calling one of the largest…
Cryptocurrency platform OKX has announced the temporary suspension of its Decentralized Exchange (DEX) aggregator tool. This decision comes on the heels of coordinated attacks by…
New StilachiRAT uses sophisticated techniques to avoid detection Pierluigi Paganini March 18, 2025 Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses…
Security researchers have confirmed that a critical remote code execution (RCE) vulnerability in Apache Tomcat, tracked as CVE-2025-24813, is being actively exploited in the wild.…
