News that matters, without the noise.

Shai-Hulud Attack Nips Cyber-Firm CrowdSec’s GitHub Data

Threat actors stole 170 private repositories using an OAuth token stolen from a former employee’s computer through the

Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real

As more reports of misalignment incidents underscore AI risks, large AI labs, regular businesses, and even nations are

New ClosedQuorum Windows malware uses AI for attack decisions

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine

Reducing shadow IT visibility gaps with Wazuh

Shadow IT can leave security teams unaware of unmanaged endpoints, unauthorized software, and other assets that fall outside

The 4️⃣ Pillars of Digital Sovereignty

Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals

Available on Telegram for a $1,500 initiation fee and a recurring monthly $500 subscription, EvilTokens provided cybercriminals with

Siemens Industrial Edge Management

View CSAF Summary Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker

OpenPLC Runtime v3

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue

lwIP (Lightweight IP)

View CSAF Summary Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory

Siemens WTV676 and WTV776

View CSAF Summary The products listed below contain a denial of service vulnerability that could allow an attacker

Siemens SIPLUS and SIMATIC Products

View CSAF Summary Multiple Siemens products are vulnerable to the “Copy Fail” vulnerability. Siemens has released new versions

USN-8804-1: OpenSSH vulnerabilities

Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell metacharacters in certain usernames. An attacker could possibly use this