AI Code Editors exploited for silent supply chain attacks
Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks Pierluigi Paganini March 19, 2025 The Rules File Backdoor attack targets AI code…
Category: Securityaffairs
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 19, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft Pierluigi Paganini March 18, 2025 11 state-sponsored APTs exploit malicious .lnk…
ChatGPT SSRF bug quickly becomes a favorite attack vector
ChatGPT SSRF bug quickly becomes a favorite attack vector Pierluigi Paganini March 18, 2025 Threat actors exploit a server-side request forgery (SSRF) flaw, tracked as…
GitHub Action tj-actions/changed-files was compromised in supply chain attack
GitHub Action tj-actions/changed-files was compromised in supply chain attack Pierluigi Paganini March 18, 2025 The GitHub Action tj-actions/changed-files was compromised, enabling attackers to extract secrets…
New StilachiRAT uses sophisticated techniques to avoid detection
New StilachiRAT uses sophisticated techniques to avoid detection Pierluigi Paganini March 18, 2025 Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses…
Threat actors rapidly exploit new Apache Tomcat flaw following PoC release
Pierluigi Paganini March 17, 2025 Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure Threat actors began exploiting a recently disclosed Apache Tomcat…
Attackers use CSS to create evasive phishing messages
Attackers use CSS to create evasive phishing messages Pierluigi Paganini March 17, 2025 Threat actors exploit Cascading Style Sheets (CSS) to bypass spam filters and…
Researcher releases free GPU-Based decryptor for Linux Akira ransomware
Researcher releases free GPU-Based decryptor for Linux Akira ransomware Pierluigi Paganini March 17, 2025 A researcher released a free decryptor for Linux Akira ransomware, using…
Researcher releases free GPU-Based decryptor for Linux Akira ransomware
Researcher releases free GPU-Based decryptor for Linux Akira ransomware Pierluigi Paganini March 17, 2025 A researcher released a free decryptor for Linux Akira ransomware, using…
Denmark warns of increased state-sponsored campaigns targeting the European telcos
Denmark warns of increased state-sponsored campaigns targeting the European telcos Pierluigi Paganini March 16, 2025 Denmark ‘s cybersecurity agency warns of increased state-sponsored campaigns targeting…
A ransomware attack hit the Micronesian state of Yap, causing the health system network to go down.
A ransomware attack hit the Micronesian state of Yap, causing the health system network to go down. Pierluigi Paganini March 16, 2025 A Micronesian state…