Agentic AI Isn't Risky; the Way Orgs Deploy It Is
AI agents aren't black boxes — they're models interacting with software tools. The risk lies in their overlap.
Aggregator
Attackers Move Past Typosquatting to Realistic Package Impersonation
3 weeks 6 days ago
Most malicious open source packages now mimic real code rather than rely on typosquatting
Resecurity Supports Microsoft DCU in Disrupting Fox Tempest ’s Cybercriminal Code-Signing Ecosystem
3 weeks 6 days ago
Microsoft and Resecurity disrupted Fox Tempest, a malware-signing service that used fake Microsoft certificates to make malware look legitimate. Resecurity supported Microsoft’s Digital Crimes Unit (DCU) in its disruption of Fox Tempest, a financially motivated threat actor operating a malware-signing-as-a-service (MSaaS) capability used by cybercriminals to make malicious files appear legitimate. On May 19, 2026, […]
Pierluigi Paganini
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
3 weeks 6 days ago
Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server (EMS) deployments to deliver a credential-stealing malware family dubbed EKZ Infostealer.
"The campaign abused trusted endpoint management infrastructure to deliver malware across managed endpoints," Arctic Wolf said. "Threat actors disguised the credential stealer
The Hacker News
白宫疑似秘密搭建第二套联邦数字系统
3 weeks 6 days ago
Brazilian Food-Delivery Giant iFood Targeted in Alleged 43.8M-Record Customer Data Extortion
3 weeks 6 days ago
A threat actor using the alias bacen claims to hold 43,847,219 Brazilian iFood customer records, said to include CPF national IDs, full names, emails, phone numbers, and credit-card data.
Dark Web Informer
Телескоп NASA падает на Землю — агентство остановило науку и развернуло аппарат, чтобы выиграть время
3 weeks 6 days ago
Что такое обсерватория Swift и почему NASA тратит деньги на её спасение вместо того, чтобы дать сгореть.
The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
3 weeks 6 days ago
Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deploy itself across an entire network using series of simultaneous lateral movement techniques per target.
The post The Gentlemen ransomware: Dissecting a self-propagating Go encryptor appeared first on Microsoft Security Blog.
Microsoft Threat Intelligence
The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
3 weeks 6 days ago
Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deploy itself across an entire network using series of simultaneous lateral movement techniques per target.
The post The Gentlemen ransomware: Dissecting a self-propagating Go encryptor appeared first on Microsoft Security Blog.
Microsoft Threat Intelligence
CVE-2025-38628 | Linux Kernel up to 6.12.41/6.15.9/6.16.0 vdpa mlx5_vdpa_free uninitialized resource (Nessus ID 270575 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability classified as problematic was found in Linux Kernel up to 6.12.41/6.15.9/6.16.0. This affects the function mlx5_vdpa_free of the component vdpa. Executing a manipulation can lead to uninitialized resource.
This vulnerability is handled as CVE-2025-38628. The attack can only be done within the local network. There is not any exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2025-38627 | Linux Kernel up to 6.16.0 f2fs f2fs_inode_info use after free (Nessus ID 302764 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.16.0. This affects the function f2fs_inode_info of the component f2fs. Such manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2025-38627. The attack can only be initiated within the local network. No exploit exists.
You should upgrade the affected component.
vuldb.com
CVE-2025-38626 | Linux Kernel up to 6.6.101/6.12.41/6.15.9/6.16.0 f2fs f2fs_map_blocks allocation of resources (Nessus ID 260275 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.101/6.12.41/6.15.9/6.16.0. This vulnerability affects the function f2fs_map_blocks of the component f2fs. This manipulation causes allocation of resources.
This vulnerability is registered as CVE-2025-38626. The attack requires access to the local network. No exploit is available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2025-38624 | Linux Kernel up to 6.16.0 kernel/irq/msi.c pci_hp_remove_devices denial of service (Nessus ID 260280 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability was found in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0 and classified as critical. This impacts the function pci_hp_remove_devices of the file kernel/irq/msi.c. The manipulation results in denial of service.
This vulnerability is identified as CVE-2025-38624. The attack can only be performed from the local network. There is not any exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2025-38623 | Linux Kernel up to 6.16.0 pci_bus_to_OF_node denial of service (Nessus ID 270738 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability was found in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0. It has been rated as critical. Affected by this issue is the function pci_bus_to_OF_node. Performing a manipulation results in denial of service.
This vulnerability is cataloged as CVE-2025-38623. The attack must originate from the local network. There is no exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2025-38625 | Linux Kernel up to 6.6.101/6.12.41/6.15.9/6.16.0 privilege escalation (Nessus ID 270575 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability was found in Linux Kernel up to 6.6.101/6.12.41/6.15.9/6.16.0. It has been classified as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in privilege escalation.
This vulnerability was named CVE-2025-38625. The attack needs to be approached within the local network. There is no available exploit.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-38622 | Linux Kernel up to 6.16.0 net net/core/skbuff.c udp_rcv_segment denial of service (Nessus ID 266176 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0. This issue affects the function udp_rcv_segment of the file net/core/skbuff.c of the component net. Such manipulation leads to denial of service.
This vulnerability is documented as CVE-2025-38622. The attack requires being on the local network. There is not any exploit available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-38621 | Linux Kernel up to 6.16.0 rdev_addable null pointer dereference (Nessus ID 260278 / WID-SEC-2025-1898)
3 weeks 6 days ago
A vulnerability was found in Linux Kernel up to 6.16.0 and classified as critical. Affected by this issue is the function rdev_addable. Such manipulation leads to null pointer dereference.
This vulnerability is referenced as CVE-2025-38621. The attack needs to be initiated within the local network. No exploit is available.
It is suggested to upgrade the affected component.
vuldb.com
IBM and Red Hat are betting $5 billion that open source needs a security guard
3 weeks 6 days ago
IBM and Red Hat announced Project Lightwell, a $5 billion commitment backed by new frontier AI capabilities and a global force of more than 20,000 engineers to help enterprises secure open source software. Together, these investments establish a new model for enterprise use of open source software, from upstream development through production environments. Project Lightwell will establish a trusted enterprise clearinghouse combined with a global force of engineers to identify and fix vulnerabilities at scale. … More →
The post IBM and Red Hat are betting $5 billion that open source needs a security guard appeared first on Help Net Security.
Industry News
Everest
3 weeks 6 days ago
You must login to view this content
cohenido
Everest
3 weeks 6 days ago
You must login to view this content
cohenido