Four of the bugs can crash a device. The other two could let an attacker who slips a malicious image in front of the bootloader run their own code, before the device
Hackers exploit critical auth bypass in Gitea Docker image
Money launderer accused of stealing seized crypto while in prison
In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO.
The post In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops appeared first on SecurityWeek.
Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched
No old password. No backup card. Once it is reset, whoever did it controls the wallet and can move the coins out.
This is not an emergency for most owners. The attack needs
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
A brief description of the high-severity vulnerabilities is as follows –
GHSA-hjr6-g723-hmfm (CVSS score: 8.8) – An operating system
The Replicant in Your Directory: AI Agents and the Identity Security Gap
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
Chinese cybersecurity company QiAnXin said that while the threat cluster may appear like a low-sophistication, high-activity operation that propagates malware via counterfeit installers using SEO poisoning techniques, it belies their true organizational
Third US Security Expert Sentenced to Prison for Helping Ransomware Gang
Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group.
The post Third US Security Expert Sentenced to Prison for Helping Ransomware Gang appeared first on SecurityWeek.
China, India-Linked Hackers Both Targeted Same Pakistani Police Force
Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne.
The post China, India-Linked Hackers Both Targeted Same Pakistani Police Force appeared first on SecurityWeek.
