Tag: compromised

  • The Register: Ivanti EPMM holes let miscreants plant shady listeners, CISA says

    Source URL: https://www.theregister.com/2025/09/19/cisa_ivanti_bugs_exploited/ Source: The Register Title: Ivanti EPMM holes let miscreants plant shady listeners, CISA says Feedly Summary: Unnamed org compromised with two malware sets An unknown attacker has abused a couple of flaws in Ivanti Endpoint Manager Mobile (EPMM) and deployed two sets of malware against an unnamed organization, according to the US…

  • The Register: Crims bust through SonicWall to grab sensitive config data

    Source URL: https://www.theregister.com/2025/09/18/sonicwall_breach/ Source: The Register Title: Crims bust through SonicWall to grab sensitive config data Feedly Summary: Vendor pulls plug on cloud backup feature, urges admins to reset passwords and re-secure devices SonicWall is telling some customers to reset passwords after attackers broke into its cloud backup service and accessed firewall configuration data.… AI…

  • The Register: Cybercriminals pwn 850k+ Americans healthcare data

    Source URL: https://www.theregister.com/2025/09/18/850k_americans_affected_by_medical/ Source: The Register Title: Cybercriminals pwn 850k+ Americans healthcare data Feedly Summary: Three US medical centers fess up to serious breaches Cybercriminals broke in and stole nearly a million Americans’ data in the space of a week, after three digital burglaries at healthcare providers.… AI Summary and Description: Yes Summary: The text…

  • The Register: Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet

    Source URL: https://www.theregister.com/2025/09/18/vc_giant_insight_partners_confirms/ Source: The Register Title: Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet Feedly Summary: VC giant rebuilt boxes, patched holes, and says it’s beefed up security – but won’t say who did it Venture capital giant Insight Partners has confirmed that a January ransomware attack compromised the personal…

  • Slashdot: DeepSeek Writes Less-Secure Code For Groups China Disfavors

    Source URL: https://slashdot.org/story/25/09/17/2123211/deepseek-writes-less-secure-code-for-groups-china-disfavors?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: DeepSeek Writes Less-Secure Code For Groups China Disfavors Feedly Summary: AI Summary and Description: Yes Summary: The research by CrowdStrike reveals that DeepSeek, a leading AI firm in China, provides lower-quality and less secure code for requests linked to certain politically sensitive groups, highlighting the intersection of AI technology…

  • Unit 42: "Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack

    Source URL: https://unit42.paloaltonetworks.com/npm-supply-chain-attack/ Source: Unit 42 Title: "Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack Feedly Summary: Self-replicating worm “Shai-Hulud” has compromised 180-plus software packages in a supply chain attack targeting the npm ecosystem. We discuss scope and more. The post “Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack appeared first on Unit…

  • Wired: A DHS Data Hub Exposed Sensitive Intel to Thousands of Unauthorized Users

    Source URL: https://www.wired.com/story/a-dhs-data-hub-exposed-sensitive-intel-to-thousands-of-unauthorized-users/ Source: Wired Title: A DHS Data Hub Exposed Sensitive Intel to Thousands of Unauthorized Users Feedly Summary: A misconfigured platform used by the Department of Homeland Security left national security information—including some related to the surveillance of Americans—accessible to thousands of people. AI Summary and Description: Yes Summary: The text highlights a…

  • The Register: Self-propagating worm fuels latest npm supply chain compromise

    Source URL: https://www.theregister.com/2025/09/16/npm_under_attack_again/ Source: The Register Title: Self-propagating worm fuels latest npm supply chain compromise Feedly Summary: Intrusions bear the same hallmarks as recent Nx mess The npm platform is the target of another supply chain attack, with crims already compromising 187 packages and counting.… AI Summary and Description: Yes Summary: The text discusses a…

  • Krebs on Security: Self-Replicating Worm Hits 180+ Software Packages

    Source URL: https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/ Source: Krebs on Security Title: Self-Replicating Worm Hits 180+ Software Packages Feedly Summary: At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected multiple code packages…