Microsoft Traces Four Ransomware Brands to One Repeating Playbook
The payload name changed across Qilin, DragonForce, Anubis and BERT deployments, but the operator kept returning to the same remote-access and exfiltration tools.
Security
Vulnerabilities, defensive security, architecture and operational security.
How a Public iCloud Calendar Became a macOS Malware Loader
A MacSync downloader feeds a public iCloud calendar into zsh until it reaches commands hidden in the event description.
An Open Docker Port Gave Attackers Their Own AI Operator
The AI agent is not the entry point. An unauthenticated Docker API is, and Carbonato turns it into privileged host access and automated post-compromise work.
SolarWinds Patches Two Routes Into Its Monitoring Servers
SolarWinds patched two remote-code paths in its monitoring platform, but each depends on a specific non-default or communication configuration.
A Leaked GitLab Email Address Can Become a Code-Push Credential
An incoming GitLab email address carries account authority. Research shows why a leaked address needs the same response as a leaked access token.
Miljödata Reported 2.2 Million People Affected. Sweden Fined It SEK 1.8 Million
The enforcement decision is smaller than the breach headline, but its reasoning reaches every supplier handling concentrated public-sector data.
Attackers Need No Login to Exploit This Roundcube Plugin
A pre-authentication SQL injection in Roundcube's virtuser_query plugin is now being exploited, four months after fixed versions shipped.
This Rogue MFA Provider Can Steal the Password You Just Reset
A password change can feed the new secret straight back to the attacker if the malicious authentication provider remains registered.
Bitget Freezes Withdrawals After a $351.6 Million Wallet Breach
Bitget says unauthorised transfers affected approximately $351.6 million. The attack path remains under investigation.
One Browser Extension Can Secretly Command Five AI Assistants
The extension did not need to persuade the model. It impersonated the channel the browser’s privileged assistant was built to trust.