Risky Bulletin
Risky Bulletin: While everyone was looking at PHP, another RCE is wrecking what's left of the internet
In other news: ABC wipes staff devices; third PHP RCE incoming; new HTTP/3 DDoS attack vector.
Risky Bulletin
Risky Bulletin
Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies
In other news: Pentagon builds tech sabotage unit; PHP2Shell exploitation gets underway; GoDaddy revokes 400,000 certs.
Risky Bulletin
Risky Bulletin: Hacker hijacks 10% of Tor exit nodes
In other news: Second ransomware negotiator linked to ShinyHunters; Chinese crime ring hacks Staples; hacker leaks AfD internal data.
Risky Bulletin
Risky Bulletin: PwnEscape vulnerability lets you escape KVM
In other news: Supply chain incidents at AOMEI and ConnectWise; Intel discontinues SGX; US infosec job postings fell by 25%.
Risky Bulletin
Risky Bulletin: Russia arrests DataSuckers hacking group
In other news: Al Jazeera employees targeted with Candiru spyware; US disrupts 40 DPRK laptop farms; OpenAI employee arrested for planting spy device.
Risky Bulletin
Risky Bulletin: Spyware chip found in Ledger crypto-wallets
In other news: Cyberattack defrosts supermarket fridges; Ahold Delhaize supermarkets go offline across the world; EU wants smart glasses to beep loudly when recording.
Risky Bulletin
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
In other news: Hackers breach TLD registrars to get Google certs; Qilin member arrested in Japan; Google suspends OSS VRP due to AI spam.
Risky Bulletin
Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe
In other news: Ransomware attack could have crippled South Africa's air traffic operations; US sanctions Venezuelan ATM hackers; Chinese APT targets AI experts.
Risky Bulletin
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
In other news: ShinyHunters member arrested in the Netherlands; Apple fixes iOS zero-day found by Meta; Citrix zero-days see mass exploitation within hours.
Risky Bulletin
Risky Bulletin: Intel ends paid bug bounties
In other news: OpenAI agents probed dozens of organizations; fraudsters use AI to scam €95m from an Italian bank; Bitget hacked for $350m.
Risky Bulletin
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
In other news: OpenAI agent hacked Australian Medicare website; OpenAI gives Ukraine access to Daybreak; UK to establish anti-disinformation center.
Risky Bulletin
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
In other news: Ukrainian hackers leak Russia's naval secrets; ShinyHunters hack the FBI; tech firms disrupt EvilTokens PhaaS.