LiteLLM Compromised in Fresh Supply Chain Attack
LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker. The incident occurred…
Category: SecurityWeek
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.…
11 Million Impacted by Capcom Data Breach
Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals. The…
Attackers Exploit Third Arista VCO Zero-Day in Four Months
Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity…
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat actors have tried to use the flaws to spread a Mirai botnet.…
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
A China-linked threat actor has been using the open source AI penetration testing framework Artex to automate a recent ConnectWise hacking campaign targeting hundreds of…
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Tech vendors, cybersecurity companies and government agencies have published advisories, detections and mitigations for the PHP2Shell vulnerabilities, while many software makers are still checking whether…
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Signal has resolved a critical-severity vulnerability that could allow a malicious caller to keep audio and video tracks enabled even after the user hung up.…
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Amsterdam-based industrial cybersecurity firm Indurex has raised €7 million (roughly $7.84 million) in a round led by Contrarian Ventures, with Axeleo Capital and Curiosity also…
Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen is a hacker with a hacker mindset that is focused on the right way to do wrong things to get the right result.…
Splunk, SolarWinds Release Fresh Security Updates
Splunk and SolarWinds this week released patches for multiple vulnerabilities, including flaws leading to code execution, privilege escalation, denial-of-service (DoS), and information disclosure. On Wednesday,…