ShadowRay 2.0 Cyberattack
A sophisticated cyber operation known as ShadowRay 2.0 is actively compromising publicly accessible Ray clusters through the exploitation of a previously disclosed code execution vulnerability, transforming these systems into a self-replicating cryptocurrency mining network.
Ray, an open-source framework created by Anyscale, enables developers to construct and expand...
An innovative open-source solution emerges for safeguarding code repositories from accidental exposure.
This tool delves into directories, individual files, and git histories, meticulously searching for sensitive data.
Its engine employs both pre-defined and customizable patterns to detect valid secrets with high accuracy.
The risk is real: malicious actors routinely automate scans of public...
Cybersecurity experts have identified seven malicious packages on the Node Package Manager (npm) platform that leverage Adspect's cloud infrastructure to distinguish between security analysts and genuine targets, ultimately directing unsuspecting users toward fraudulent destinations.
Socket, an application security firm, revealed that these packages aim to redirect victims to cryptocurrency...
The Tor Project has officially moved away from BridgeDB, its original bridge distribution mechanism, implementing a next-generation system called rdsys. This strategic shift represents a significant step forward in combating increasingly sophisticated censorship techniques while making the network more accessible to users worldwide.
BridgeDB served the Tor community for more than ten years as...
Brave has introduced a new privacy enhancement called "Shred" within its iOS browser (version 1.71), designed to give users greater control over their online data. This feature enables the quick deletion of site-specific information, helping to prevent first-party tracking and enhance user privacy.
With Shred, users can remove stored data such as cookies, local storage, and cache files...
Nouveau Rooney TOTY Icon
Une nouvelle carte vient d’être ajoutée au mode DCE sur FC 26 : il s’agit de Wayne Rooney en version TOTY Icon.
Rooney, véritable icône du football anglais, est reconnu pour son mélange unique de talent naturel et d’une volonté féroce de gagner.
Dès ses débuts, il s’est...
Finger Protocol Resurgence
For many years, the "finger" protocol remained largely dormant, but recent reports indicate its resurgence as a tool for malicious activities. Cybercriminals have begun exploiting this protocol to gain unauthorized access to Windows systems by retrieving sensitive commands remotely.
Historically, the finger command served as a quick way to gather user information on...
anthropic reports that a chinese state-sponsored threat group, tracked as gtg-1002, carried out a cyber-espionage operation that was largely automated through the abuse of the company's claude code ai model.
however, anthropic's claims immediately sparked widespread skepticism, with security researchers and ai practitioners calling the report " made up " or the company of overstating the...
Fortinet Addresses Critical Security Flaw in FortiWeb After Active Exploitation
Security vendor Fortinet has acknowledged patching a severe vulnerability in its FortiWeb web application firewall that attackers were actively targeting in widespread campaigns.
The vulnerability, now identified as CVE-2025-64446, involves a path confusion issue in the FortiWeb GUI component that enables...
Kraken Ransomware Overview
The Kraken ransomware group operates across Windows, Linux, and VMware ESXi platforms,
employing a distinctive method to gauge system performance for encryption.
Its process involves running speed tests on target machines,
ensuring data encryption proceeds efficiently without causing system overload.
This tactic of using temporary files to decide between full or...