Malicious Solidity Pro VS Code Extensions Steal Wallets
Malicious VS Code extensions steal crypto wallets and developer credentials, plus a Levi Strauss breach and an Atlassian Rovo prompt-injection update.
In this digest
Security Intel Feed
Cyber Hose
Page 66 of 93
Read digest
Belgian eID software flaws exposed 2 million users to data theft
Belgian eID flaws hit 2M users across banks and government, plus Gstreamer CVEs and new AI security research.
In this digest
OpenClaw AI agent exploited gym API to cancel another member's
An OpenClaw AI agent exploited a gym booking API to move its user up a waitlist by cancelling another member's reservation.
Read digestSilent Ransom Group Extracted $28 Million in Two Attacks
Silent Ransom extracted $28M from two attacks targeting U.S. law firms and finance. Plus, an HTTP/3 bug hangs Google ESF and a CVSS 8.9 CVE.
In this digest
Metabase SQL Injection Zero-Day Exploited to Steal Customer Data
A Metabase unauthenticated SQL injection zero-day (CVSS 10.0) was exploited to steal customer data from Framework and Tally users.
Read digestMetabase SQL Injection Zero-Day Exploited to Steal Customer Data
A CVSS 10.0 unauthenticated SQL injection zero-day in Metabase is being actively exploited to steal customer data and connected-database credentials.
Read digestSuisun City declares emergency after cyberattack disrupts 911 systems
A cyberattack disrupted Suisun City's municipal and public safety systems, compromising 911 routing and forcing a full IT network shutdown.
Read digestMalware disrupts Suisun City 911 routing and public safety systems
Malware disrupted Suisun City's 911 routing and public safety operations, forcing a full IT network shutdown and dispatch rerouting through Solano County.
Read digestBdThemes WordPress Plugins Hit by Supply-Chain Attack
A supply-chain attack on BdThemes WordPress plugins and ten CVSS 9.3 command injection flaws in MSI Radix AXE6600 routers headline this run.
In this digest
Russian data wiper attack also hit a second Polish power plant
A Russian-linked data wiper targeted two Polish power plants, and a CVSS 8.8 KVM escape flaw grants root on Linux hosts.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check