178 casos · pág. 2/9
SafeDep reports a growing npm campaign in which forks of Baileys, the WhatsApp Web library for Node.js, abuse the installer's authenticated WhatsApp session to silently follow attacker-controlled channels. Confirmed malicious packages total 82 Baileys-based package names (375 versions) and 15 libsignal-node impersonators (38 versions), ou…
SafeDep research shows that Cursor's Import VS Code Configuration step copies only the publisher.extensionname of each installed extension and drops the version. Cursor then installs whatever version Open VSX (run by the Eclipse Foundation) calls latest, through its proxy marketplace.cursorapi.com. In SafeDep's test, three extensions pinn…
F5 Labs analyzes CVE-2025-23061 and its predecessor CVE-2024-53900, a CVSS 9.0 flaw in the Mongoose MongoDB client library that allows remote code execution on Node.js API servers. The bug abuses the populate method, which accepts a $where clause containing arbitrary JavaScript. The initial fix for CVE-2024-53900 blocked only top-level $w…
F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…
At Open Source Summit Europe in Prague, Linus Torvalds told Dirk Hohndel (Ericsson Software Technology) that he likes using AI, particularly for beginners and for tasks outside his expertise. He cautioned that it must be used carefully in important work such as the Linux kernel. AI tools now help find and fix kernel bugs, including genuin…
Nvidia has released Nemotron 3.5 Super VL, a 120-billion-parameter open-weight model aimed at agentic workloads, together with two edge models, Nemotron 3.5 Bolt 74B-A9B 24GB and Nemotron 3.5 Bolt E4B 4GB. Nvidia claims it is 5x faster than the next-best model in its class, based on Artificial Analysis benchmarks that ranked InclusionAI's…
Anthropic announced that six evaluators from METR, a third-party nonprofit that tests frontier models, will get "employee-like access" to its hardware, office space and internal tools roughly on par with those of its own risk assessment teams. Exclusions are limited to a few categories: customer data, attorney-client privileged informatio…
A flaw dubbed SneakPeek in the preview pane of Anthropic's Claude Code Desktop can let adversaries quietly steal credentials from developers without any user interaction (zero-click). According to the report, exposed secrets include SSH private keys, AWS credentials and Claude OAuth tokens. The article excerpt provides no CVE identifier, …
An intruder reached a legacy system at OpenCode on the night of October 16, and the company says third-party AI provider keys saved in OpenCode Console "may have been exposed." About 1.4% of Console users, all with an outside provider linked, were notified by email on October 17 and told to revoke and replace their OpenAI, Anthropic or Go…
On October 21, attackers compromised the release pipeline of LiteLLM, an open-source Python SDK and AI gateway with about 92 million monthly PyPI downloads. They published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The payload steals cloud, AI, developer and browser credentials and loads remote-code execution tools. All seven…
Indian certificate authority eMudhra will withdraw from its global SSL/TLS certificate business, its board decided on Thursday, five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. Six of the eight were TLS intermediates. Mozilla decided on October 20 to distrust the root above th…
Between 19 and 22 October 2026, an operator published 15 npm packages whose names end in testmetest, carrying a Miasma-family self-propagating worm. The malicious versions steal credentials, spread to other packages and repositories, and install a wiper that deletes the victim's home directory when the stolen GitHub token is revoked. Safe…
A new bipartisan House bill, the AI Cyber Defense Act, would direct NIST to develop voluntary industry standards and best practices for defending AI models against distillation attacks by foreign entities. The bill is sponsored by Reps. Pat Harrigan (R-N.C.) and George Whitesides (D-Calif.) and was shared exclusively with CyberScoop ahead…
Microsoft researchers report that China state-aligned hackers breached ConnectWise's cloud backup service and stole application credentials used to link ConnectWise with its customers' Microsoft-hosted environments. With these credentials the attackers could sign in as authorized users and access emails and other files. Microsoft says the…
Indian certification authority eMudhra announced on 22 October 2026 that it is withdrawing from the global SSL/TLS certificate business. The announcement follows public reports that the private keys of eight intermediate CAs were trivially weak. The issue was reported to Mozilla on 17 October. The key values were 4, 56, 66, 115, 155, 156,…
Railway, a cloud development platform, confirmed that unidentified attackers may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These variables typically hold passwords and API keys that apps use to reach cloud storage and databases. Railway's initial analysis points to a "subset of users", b…
Indian certificate authority eMudhra announced it will stop issuing SSL/TLS certificates, days after researchers showed that the private keys of eight of its intermediate certificates could be reconstructed in under a second. Major browser vendors blocked the certificates, Mozilla removed the eMudhra root from its trust store, and Google …
A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …
Sekoia observed an attacker interacting with an exposed Flowise AI orchestration honeypot (emulating version 2.2.8) in late August 2026. The operator enumerated chatflows and stored credentials, tried to create a rogue workflow, and used prompt injection to turn the agent into an offensive analysis assistant. Sekoia assesses the activity …
On October 21, 2026, attackers compromised the LiteLLM release pipeline and published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The package carried a credential stealer ("privcollect") and a backdoor that runs remote code every hour, effectively a RAT. LiteLLM suspects the attacker obtained developer GitHub CLI OAuth tokens …
