Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidia…
Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers
A new supply chain attack technique targeting the Python Package Index (PyPI) registry has been exploited in the wild in an attempt to infiltrate downstream or…
New WordPress Update Addressed A POP Chain RCE Vulnerability
Heads up, WordPress admins! Ensure updating your websites at the earliest as a severe remote…New WordPress Update Addressed A POP Chain RCE Vulnerability on La…
Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bul…
Ubuntu 6258-1: LLVM Toolchain vulnerabilities
Several security issues were fixed in LLVM Toolchain.
A New Linux Flaw Can Be Chained with Other Two Bugs to Gain Full Root Privileges
Qualys researchers demonstrated how to chain a new Linux flaw with two other two issues to gain full root privileges on an impacted system.
Chaining Yunmai Smart Scale App Vulnerabilities Could Expose User Data
Numerous bugs riddled the security of the Chinese-made Yunmai Smart Scale devices. The vulnerabilities specifically…Chaining Yunmai Smart Scale App Vulnerabili…
Critical Polygon Blockchain Vulnerability Could Allow Withdrawing Huge Amounts
While security issues are always huge for the crypto world, the vulnerability in the Polygon…Critical Polygon Blockchain Vulnerability Could Allow Withdrawing …
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploite…
SUSE Go 1.26.10 Update Fixes HTTP, TLS and Go Toolchain Issues
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed.
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Go Security Update Fixes 15 Flaws in Servers and Toolchains
Go 1.27.2 and 1.26.9 arrived on Oct 8, 2026 with corrections for 15 security flaws.
Nftables Interval Bug Can Leave Linux Using a Freed Chain Reference
Jérémy Jean has confirmed that a maintainer's proposed patch stops the reproduced failure behind an nftables interval bug.
AI Is Learning to Turn Linux Kernel Vulnerabilities Into Exploit Chains
A kernel crash tells defenders that something went wrong. It does not show whether an attacker can turn that failure into a useful capability, combine several …
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, co…
CUPS Exploit Chain Still Reaches Root Access, Despite 2024 Fixes
The Common Unix Printing System (CUPS) still sits on millions of Linux systems, usually in the background, rarely monitored, and often trusted more than it sho…
The Ni8mare Chain: How n8n RCE Turns Auth Bypass Into Linux Host Compromise
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware
Another week in cybersecurity. Another week of "you've got to be kidding me."Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot…
Fedora 43: proxychains-ng Denial of Service CVE-2025-34451 Advisory
Update to master to fix CVE-2025-34451
Fedora 42: proxychains-ng Critical Update for CVE-2025-34451 DoS Attack
Update to master to fix CVE-2025-34451
Python: Tarfile Arbitrary File Write Risk CVE-2025-4517
CVE-2025-4517 sits inside Python's packaging stack. It turns archive extraction into an arbitrary file-write vector that hits core supply chain security. On pa…
Mageia 9: Critical GoLang Code Execution Vulnerability on 2025-02-05
Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code execution. When using the Go toolchain in directories fetched usin…
New NKAbuse Malware Exploits NKN Blockchain Tech for DDoS Attacks
A novel multi-platform threat called NKAbuse has been discovered using a decentralized, peer-to-peer network connectivity protocol known as NKN (short for New …
Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…