inionline.net https://validator.w3.org/feed/docs/rss2.html Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack What We Missed: Feds Lasso Texas Laptop Farms Les supermarchés de l’UE paient d’un firmware de réfrigérateur non mis à jour Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed UAE Transitions 50% of Gov’t Services to Agentic AI China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack PHP2Shell Remote Code Execution Vulnerabilities TiDB Breach Exposes Flawed Cloud Security Assumptions Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens ‘PHP2Shell’ Bugs Signal Red Alert for Security Industry Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors OpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So Optiv Launches CyberBOT Cybersecurity Awareness Training Program Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands Decades-Old Windows Utility Powers Modern ClickFix Attack China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t The Harness Is the Hard Part of Agentic Pentesting Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution Close Identity Gaps in Software Development Before Unleashing AI Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree