Archive
1,141–1,152 of 3,915 items
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved...
Oct 22, 2026 · StaffOriginally on Wedgetail
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python packa...
Oct 22, 2026 · StaffOriginally on Wedgetail
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which tar...
Oct 22, 2026 · StaffOriginally on Wedgetail
Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns
Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security program...
Oct 22, 2026 · StaffOriginally on Wedgetail
Cheong Wa Dae holds emergency meeting over PHP security flaws
South Korea’s presidential National Security Office convened an emergency cybersecurity meeting on Thursday to coordinate a response to a critical vul...
Oct 22, 2026 · StaffOriginally on Wedgetail
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug...
Oct 22, 2026 · StaffOriginally on Wedgetail
Japan’s banks and airlines pull digital services offline in scramble to fix PHP flaws
Japan is particularly vulnerable due to its heavy reliance on legacy software and outsourcing.
Oct 22, 2026 · StaffOriginally on Wedgetail
Digital AI worms can threaten business networks — expert
IoT devices have long been considered a major vulnerability in network infrastructure, Daniil Borislavsky noted
Oct 22, 2026 · StaffOriginally on Wedgetail
Australia’s NextDC stock collapse fires a global AI warning
For two decades, data centers were relatively safe, lucrative real estate investments. They attracted investors because they served as digital infrast...
Oct 22, 2026 · StaffOriginally on Wedgetail
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working p...
Oct 22, 2026 · StaffOriginally on Wedgetail
Hong Kong watchdog warns of hacking risks from flaws in web programming language
A Hong Kong information security watchdog issued an “extremely high risk” warning on Thursday morning over two critical flaws in a widely used web pro...
Oct 22, 2026 · StaffOriginally on Wedgetail
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 202...
Oct 22, 2026 · StaffOriginally on Wedgetail