Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

GBHackers

Everything RedTeam Tribune has reported about GBHackers: 2 stories, newest first. Part of our Threat Intelligence coverage.

15 Oct
Cyber Attacks

Trellix Analysis Reveals AI Agent Credential Leakage Risks

Automated coding agents can expose secrets by moving credentials from secure storage into logs and external model inputs during routine tasks.

11 Oct
Threat Intelligence

DNS Tunneling: 40 Billion Records From One Domain Signal Iranian Infrastructure Expansion

A single domain triggered 40 billion DNS records during a military conflict, signaling massive infrastructure expansion for suspected Iranian operators.