Home

Click here to display content from VideoPress.
Learn more in VideoPress’s privacy policy (opens in a new tab).

Open "VideoPress Video Player" directly
  • Old Bar Beach
  • AI Generated Image – Awakening

CYBER SECURITY NEWS

  • Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
    A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as […]
  • SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
    An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes […]
  • Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
    French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST […]
  • Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
    Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations, military entities, research institutions, and critical infrastructure across Latin America, Asia, and Europe over the past year. Check Point Research is tracking the clusters under the names SilentDelivery,
  • Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
    Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two
  • Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
    The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan (RAT) that shares its lineage with AsyncRAT and DCRat. "The campaign uses Portuguese and Spanish lures that resemble court notifications, fiscalía notices, tutela proceedings, and
  • Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
    Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month  uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a "limited set of accounts." In a notice published on October 10, 2026, the company said it detected unauthorized use of internal […]

LATEST POSTS