South Korea orders security checks after bank attacks
Review exposed bank systems after confirmed South Korean attacks.
Security
Vulnerabilities, defensive security, architecture and operational security.
Fortra BoKS Patches Eight Flaws With Three Different Critical Paths
Fortra's eight BoKS advisories include three critical issues across separate trust boundaries. Defenders must distinguish the component-specific 8.1.0.24 fix from the broader Core PAM 8.1.0.30 boundary.
KillSec Servers Seized, Victim Risk Remains
KillSec's seizure leaves victim recovery questions open.
DTU’s Breach Warning Reaches Beyond Its Notification List
DTU cannot directly notify everyone whose data may be affected.
CloudSyncD Reused a Mac Password to Launch
CloudSyncD reused credentials via a counterfeit installer.
Kingston Police Details 160 GB Theft From 2025 Breach
A police notice details 160 GB taken in January 2025.
GitLab’s Self-Hosted AI Gateway Needs an Immediate Update
Self-hosted gateway fix available.
GitHub’s Confidential Advisory Comments Follow Repository Write Access
Confidential comments follow repository permissions.
Warlock Hit Water and Telecom Operators
Warlock followed likely SharePoint exploitation at unnamed water and telecom operators.
An Unauthenticated MCP Call Could Run Commands as flyto-core
A concise checklist for reviewing the service configuration and recording a decision.