2026-10-25T18:43:01Z https://nostr.now Sam Stepanyan :verified: 🐘 https://nostr.now/npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67 https://media.infosec.exchange/infosec.exchange/accounts/avatars/000/043/838/original/80775bb6ba7f839e.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/000/043/838/original/80775bb6ba7f839e.jpg https://nostr.now/nevent1qqsqd0aejp4eyh0zaevdz9qacm4xf0v6pw59g50fc8h0dtz7fc0e5uszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgc40nx0 #Anthropic launches FREE AI-powered vulnerability scanning service for established #opensource projects that have a critical impact on infrastructure and user security.<br/><br/>🔍 Periodic scans using Claude Mythos<br/>🤖 Fully AI-generated reports<br/>#AppSec<br/>👇<br/><a href="https://thehackernews.com/2026/10/anthropic-launches-free-ai.html">https://thehackernews.com/2026/10/anthropic-launches-free-ai.html</a> 2026-10-09T18:22:16Z https://nostr.now/nevent1qqsvarc4cexnyz8gngvdpruptf6x0w2k8prjtfgjddx58yw7p0hx6vszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg3w8kfl #GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber&#39;s athenadriver stealing cloud&amp;AI credentials, CI/CD secrets:<br/><br/>#SoftwareSupplyChainSecurity<br/>👇<br/><a href="https://socket.dev/blog/ghostaction-cloud-credentials">https://socket.dev/blog/ghostaction-cloud-credentials</a> 2026-10-09T14:42:56Z https://nostr.now/nevent1qqsr90njwhh50z0z5t2ht3flg0l7yxwa82w72m2pgw7g8k57h54e6wczypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgeag5z8 #AI coding agents asked for review screenshots leaked internal images in public #GitHub repos, researchers say.<br/><br/>Researchers counted 13,000+ images at 300+ orgs, including customer billing records!<br/>#AISecurity<br/>👇 <a href="https://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.html">https://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.html</a> 2026-09-30T13:29:51Z https://nostr.now/nevent1qqsxstf8umyux96d635twnnhckymtta3ehamgdr74zj49q9yfznlmzgzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgc859vy Well, good morning #ChatGPT! It&#39;s Friday, so you decide to crash with this verbose production error:<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/330/580/315/181/067/original/f27c0c286f6e2fc5.png"> <br/> 2026-09-25T07:49:35Z https://nostr.now/nevent1qqsdd28dylw98grf3aqv5ymjyez7yxvu5qcsn928u3sdvy2fyn84yqszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgh9csy9 Why “We Patched #WordPress Last Week” Is Not Enough: WordPress has urgently released v7.1.2 for a critical core #vulnerability: an unauthenticated attacker can make template resolution include a chosen local PHP file and in some conditions, achieve RCE:<br/>👇<br/><a href="https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html">https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html</a> 2026-09-22T18:48:25Z https://nostr.now/nevent1qqsyzr5s0pc4v2f67fu0udz0tssfp434m80ayggf8mpxg8elzh99tuszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgnjecnv #WordPress admin clicks a link. WordPress clicks Install.<br/><br/>“Click2Shell” abuses the admin’s logged-in session to silently install an attacker-chosen theme. Chain it with a vulnerable theme: server-side PHP execution.<br/><br/>Patch WordPress core to 7.1.1 now! 👇<br/><a href="https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html">https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html</a> 2026-09-19T16:07:05Z https://nostr.now/nevent1qqs9myhdvgdh44w3kye0r63yswe9vpu9hudjyksz533ttw3r6umkx0szypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg6gv2wr #AI: Zero-click Grok and Gemini chat history theft possible using cryptographic context injection technique that bypasses AI safety filters - demonstrated by @Adversa_AI:<br/>#AISecurity<br/>👇<br/><a href="https://securityaffairs.com/197717/hacking/zero-click-grok-chat-history-theft-adversa-ai-demonstrates-cryptographic-context-injection.html">https://securityaffairs.com/197717/hacking/zero-click-grok-chat-history-theft-adversa-ai-demonstrates-cryptographic-context-injection.html</a> 2026-08-25T08:27:29Z https://nostr.now/nevent1qqs82xgqwmuukvq5mgkuz0ltdkvx8ray2rmns6hxwueg2hpepw6xv9qzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg26lcjz #Wordpress: A Critical pre-auth #XSS to RCE vulnerability chain (CVE-2026-64638) dubbed #XSS2Shell is affecting all versions of WordPress Core. This vulnerability was discovered by AI (@pwn_ai). Patch to v7.0.3 ASAP - older versions backported:<br/>👇<br/><a href="https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html">https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html</a> 2026-08-07T18:57:23Z https://nostr.now/nevent1qqsq09qlhe626v8cr48pl8avrdqzghww9l5p75dlrv828fgwnggl65qzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgja9770 #npm: A massive #SupplyChain attack has compromised 868+ npm packages carrying 2 billion+ monthly installs with a credential-stealing worm. <br/><br/>It started with the compromise of the #GitHub account of the #keyv library with 127 million+ weekly downloads:<br/>👇<br/><a href="https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack">https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack</a> 2026-08-04T19:48:29Z https://nostr.now/nevent1qqs9z6fmak2cm575rrjt4czlr0tpk86njt55eflnnj5zds78jnmvxlqzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgmcsnkv #VMware: three critical #vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. Patches released by Broadcom - it&#39;s time to patch!<br/>👇<br/><a href="https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/">https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/</a> 2026-07-31T11:27:12Z https://nostr.now/nevent1qqs9w5sf658wd92d99jm5f5mfue0ztgnfpmyt4hvef9anvxlr4pzq7czypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgsfsfcs #XSS vulnerability is still causing havoc in 2026. XSS flaw in Microsoft Outlook Web Access (OWA) CVE-2026-42897 is actively exploited by attackers who target U.S. and EU government entities, telecommunications, financial, hospitality, aerospace:<br/>👇<br/><a href="https://thehackernews.com/2026/07/russian-hackers-exploit-microsoft-owa.html">https://thehackernews.com/2026/07/russian-hackers-exploit-microsoft-owa.html</a> 2026-07-30T08:51:01Z https://nostr.now/nevent1qqs848sns0k9jragaf5zzq3rfnfrafcfnpcm6f7ajjeu9nmqxe9quvqzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgp07m2w #AI: Comparing Open-Source AI Code Security Harnesses - a useful blog post from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l6zuv3gfpse3kev8rwk5emzmrldpac0qvg62ahk3wquq3pkx3kgqk82ry3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Semgrep</span> (<span class="italic">npub1l6z…2ry3</span>)</a></span> - some interesting approaches are emerging:<br/><br/>👇<br/><a href="https://semgrep.dev/blog/2026/comparing-open-source-ai-code-security-harnesses/">https://semgrep.dev/blog/2026/comparing-open-source-ai-code-security-harnesses/</a> 2026-07-27T21:44:35Z https://nostr.now/nevent1qqsvkrs2yxmrhda6udfku8e7dzx2dtpsfpr8datxhg4x6tlstyqrftszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgx7ghhf #AI: A Reddit post this weekend revealed that hundreds of #Claude AI shared chats were publicly discoverable through Google. Users searching queries such as &#39;site:claude[.]ai/share&#39; could access Claude&#39;s users&#39; conversations:<br/>#AISecurity<br/>👇<br/><a href="https://cybersecuritynews.com/claude-ai-shared-chats/">https://cybersecuritynews.com/claude-ai-shared-chats/</a> 2026-07-27T11:28:42Z https://nostr.now/nevent1qqsrr8rw8xuf27ycshma3prylnvfe7lvkt8w7mkn2rznue3uj2p6xmgzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgmt8wqr #Windows: if you haven&#39;t patched your MS Windows estate with July Patch Tuesday updates, now it&#39;s time to do it! #CertiGhost CVE-2026-54121 vulnerability allows an unprivileged user on your network to fully compromise the Active Directory and the Proof-of-Cocept (#POC) is out:<br/>👇<br/><a href="https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html">https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html</a> 2026-07-26T11:28:29Z https://nostr.now/nevent1qqsw0a6yg95kamvqd0awm25cnludwak8xpxgg42luehp9ewylpp447gzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg5sdz83 #AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost:<br/><br/>#AISecurity<br/> 👇<br/><a href="https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/">https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/</a> 2026-07-08T13:52:14Z https://nostr.now/nevent1qqst8klzch48rd8sam65n2v4l20etz6y26x37u84em5e253dx8anajqzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgmksdw5 #LiteLLM command injection vulnerability CVE-2026-42271 that could allow any authenticated user to run arbitrary commands on the host, has been added to the CISA KEV catalog:<br/>👇<br/><a href="https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html">https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html</a> 2026-06-09T11:11:23Z https://nostr.now/nevent1qqs9njfntvva47hnyv0huhc96flxusmtl0pdwtshpmqch4ehuduamyszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgj8xxej #NGINX: An 18-year-old RCE vulnerability CVE-2026-42945 in the rewrite module enables server takeover. Update to NGINX 1.31.0 or 1.30.1 immediately!<br/>👇<br/><a href="https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html">https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html</a> 2026-05-14T12:57:14Z https://nostr.now/nevent1qqs2dxf54378ef8ehenzfv8llxflft4ckgvqetcpzhk7kgfpfw62tyszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg6kynwf #WhatsApp Vulnerability CVE-2026-23866 Lets Attackers Leverage Instagram Reels to Execute Malicious URLs:<br/><br/>👇<br/><a href="https://cybersecuritynews.com/whatsapp-vulnerability-leverage-instagram-reels/">https://cybersecuritynews.com/whatsapp-vulnerability-leverage-instagram-reels/</a> 2026-05-05T11:44:10Z https://nostr.now/nevent1qqsfkpevw6u4t300a25nmjlsr2np4atzccmuqfamwmrxrjuzdyuz09szypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg5pjmul #LiteLLM Compromised! LiteLLM - a popular Python Library used by a lot of AI tooling got compromised on PyPI, and the malicious versions are stealing everything they can find on your machine:<br/><br/>#SoftwareSupplyChainSecurity<br/><br/>👇<br/><a href="https://www.xda-developers.com/popular-python-library-backdoor-machine/">https://www.xda-developers.com/popular-python-library-backdoor-machine/</a> 2026-03-24T15:52:06Z https://nostr.now/nevent1qqs9wpfh2gwztxdgmyfd5cdtz2ly9vav6zhfylrpuj2qawrecqc0w5czypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg88tqpu #jsPDF: Critical Path Traversal Vulnerability (CVE-2025-68428) in jsPDF - a widely-adopted #npm package for generating PDF documents in JavaScript applications allows attackers to read &amp; exfiltrate arbitrary files from the local filesystem:<br/>👇<br/><a href="https://www.endorlabs.com/learn/cve-2025-68428-critical-path-traversal-in-jspdf">https://www.endorlabs.com/learn/cve-2025-68428-critical-path-traversal-in-jspdf</a> 2026-01-07T17:43:51Z https://nostr.now/nevent1qqsvnzx7ae39t7dzersxwvel2zzerx3apyzhkkfk04d97k3d6d0qkqgzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg328ypw ⚠️#Docker: If you are using Docker for Desktop you need to update it TODAY to v4.44.3. Critical CVE-2025-9074 #vulnerability in previous versions allows malicious containers to access host system:<br/><br/>👇<br/><a href="https://www.heise.de/en/news/Docker-Desktop-Critical-vulnerability-allows-host-access-10560707.html">https://www.heise.de/en/news/Docker-Desktop-Critical-vulnerability-allows-host-access-10560707.html</a> 2025-08-21T09:06:31Z https://nostr.now/nevent1qqstpjajsvrn20uzalyllpvm0u588feax88sp3s3m9x8yd7l0kyqg7szypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujglmprq9 #CISCO: Critical severity CVSS 10 CVE-2025-20281 and CVE-2025-20282 vulnerabilities allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root! Updates released - patched now:<br/>👇<br/><a href="https://thehackernews.com/2025/06/critical-rce-flaws-in-cisco-ise-and-ise.html">https://thehackernews.com/2025/06/critical-rce-flaws-in-cisco-ise-and-ise.html</a> 2025-06-27T07:55:38Z https://nostr.now/nevent1qqsgnretlttfmfayv3ag49g4pjucndhxulzr6f9pcuw2k68q2wwe5wszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg5yeejx Actively exploited vulnerability in CVE-2024-54085 in AMI MegaRAC gives attackers extraordinary control over server fleets by allowing a remote attacker to create an admin account without any authentication:<br/>👇<br/><a href="https://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/">https://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/</a> 2025-06-27T07:21:25Z https://nostr.now/nevent1qqszsg4nusesxjgwcas8y8xrvlz0g6fhpqn8k2duemuer3cwh79k9jgzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgm07czl CISA Warns of #Google Chromium #ZeroDay Vulnerability CVE-2025-4664 Actively Exploited in the Wild affecting #Chrome, MS #Edge and Opera – Make sure to update your browser to the latest version today!<br/>👇<br/><a href="https://cybersecuritynews.com/cisa-warns-of-google-chromium-vulnerability-actively-exploited-in-the-wild/">https://cybersecuritynews.com/cisa-warns-of-google-chromium-vulnerability-actively-exploited-in-the-wild/</a> 2025-05-16T07:13:54Z https://nostr.now/nevent1qqsvg2k262zrtp9ezlgcz9est7wcvnrv4fhfvlwy9d8w9e9qk5uc8qszypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg7qweq9 #Webmin: a critical security vulnerability discovered in a widely-used web-based system administration tool, allowing authenticated attackers to escalate privileges to root level and execute code.<br/>Caused by CRLF injection: CVE-2025-2774 (CVSS 8.8)<br/>👇<br/><a href="https://cybersecuritynews.com/webmin-vulnerability-escalate-privileges/">https://cybersecuritynews.com/webmin-vulnerability-escalate-privileges/</a> 2025-05-05T09:30:48Z https://nostr.now/nevent1qqsrr0t765e8m8xragxm96r4g2y7h58ewsfg2m75gexc0ravpflapsczypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujg2qc055 #Mozilla: Multiple Vulnerabilities in Mozilla Products (Firefox, Firefox Updater, Thunderbird) Could Allow for Arbitrary Code Execution:<br/>CVE-2025-2817, CVE-2025-4082, CVE-2025-4083:<br/>👇<br/><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/">https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/</a> 2025-04-30T07:52:03Z https://nostr.now/nevent1qqsgkggadw6uz57y5n4r4tc4rss5a08krzaxeg5puns9r5k4mt2wgfgzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujggjddnw #CISA Warns of Credential Risks Tied to #Oracle Cloud Breach:<br/>👇<br/><a href="https://securityonline.info/cisa-warns-of-credential-risks-tied-to-oracle-cloud-breach/">https://securityonline.info/cisa-warns-of-credential-risks-tied-to-oracle-cloud-breach/</a> 2025-04-17T07:39:39Z https://nostr.now/nevent1qqs25upfaaw3vgxhqwuljcjuw23yvmfcnysvscpc2ftqcm3dtyt3rvczypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujghdzq0v #LibreOffice: patches two #vulnerabilities allowing arbitrary file writes &amp; remote data extraction from environment variables &amp; configuration files. CVE-2024-12425 &amp; CVE-2024-12426 require no user interaction beyond opening a malicious document containing a malicious font or an image:<br/>👇<br/><a href="https://securityonline.info/libreoffice-vulnerabilities-cve-2024-12425-cve-2024-12426-pocs-released-patch-asap/">https://securityonline.info/libreoffice-vulnerabilities-cve-2024-12425-cve-2024-12426-pocs-released-patch-asap/</a> 2025-02-18T09:04:31Z https://nostr.now/nevent1qqsdq3wxkxlupewzc8znc9ndg2dlz39hkvrzscmdna4dnl6vw67n8tqzypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujggkceq6 #PaloAlto: firewalls are being rebooted en-masse into maintenance mode remotely by attackers actively exploiting CVE-2024-3393 vulnerability by sending a malicious DNS packet to the target device. <br/>Patched PanOS versions now available:<br/>👇<br/><a href="https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/">https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/</a> 2024-12-27T20:56:36Z https://nostr.now/nevent1qqsz3w6hve886jp32mhr3fllxrytrxxs28lg7swmjmda8u2hmufaepczypqva9lptha2yvac93fne3d20k8fzy6vyflg8ryzuvjr0aqarkujgcm9qnc #Strava: Fitness app Strava gives away location of Biden, Trump and other leaders, French newspaper says:<br/><br/><a href="https://apnews.com/article/biden-trump-macron-bodyguards-security-strava-0a48afca09c7aa74d703e72833dcaf72">https://apnews.com/article/biden-trump-macron-bodyguards-security-strava-0a48afca09c7aa74d703e72833dcaf72</a> 2024-10-31T14:27:14Z