A Codex CLI flaw lets attackers turn simple repo files into hidden execution triggers. The post Stealth RCE in Codex Exposes Developer Workflows appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Category: eSecurity Planet
4.3M Users Exposed in ShadyPanda’s Long-Running Browser Hack
ShadyPanda spent years hiding inside Google-verified extensions before unleashing an RCE backdoor that compromised 4.3 million users. The post 4.3M Users Exposed in ShadyPanda’s Long-Running Browser Hack appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Man Sentenced After Running Fake Airport and In-Flight Wi-Fi Networks
A man who ran fake airport and in-flight Wi-Fi networks to steal traveler credentials has been sentenced to over seven years in prison. The post Man Sentenced After Running Fake Airport and In-Flight Wi-Fi Networks appeared first on eSecurity Planet.…
Shai-hulud 2.0 Turns npm Installs Into a Full Cloud Compromise Path
A new Shai-hulud variant turns trusted npm installs into a stealthy path for cloud-credential theft and supply chain compromise. The post Shai-hulud 2.0 Turns npm Installs Into a Full Cloud Compromise Path appeared first on eSecurity Planet. This article has…
The Hidden Calendar Threat Putting 4 Million Apple Devices at Risk
Hijacked calendar subscriptions are emerging as a stealthy new way for attackers to push phishing and malware directly onto devices. The post The Hidden Calendar Threat Putting 4 Million Apple Devices at Risk appeared first on eSecurity Planet. This article…
Coupang Breach Exposes Data of Nearly 34 Million Customers
A massive Coupang breach exposed nearly 34 million customers, highlighting insider-risk dangers and gaps in South Korea’s data protections. The post Coupang Breach Exposes Data of Nearly 34 Million Customers appeared first on eSecurity Planet. This article has been indexed…
Xillen Stealer Evolves With AI-Like Evasion and Broader Targeting
Xillen Stealer v5 uses AI-themed evasion and expanded targeting to advance credential-theft tactics. The post Xillen Stealer Evolves With AI-Like Evasion and Broader Targeting appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Critical vLLM Flaw Puts AI Systems at Risk of Remote Code Execution
A critical flaw in vLLM allows attackers to crash AI servers or execute code remotely by sending malicious prompt embeddings to the Completions API. The post Critical vLLM Flaw Puts AI Systems at Risk of Remote Code Execution appeared first…
6 Best SIEM Tools & Software
Find the best security information and event management (SIEM) tool for your organization. Compare the top solutions now. The post 6 Best SIEM Tools & Software appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Android Users at Risk as RadzaRat Trojan Evades Detection
RadzaRat’s stealth and surveillance tools make it a risk for organizations using Android devices. The post Android Users at Risk as RadzaRat Trojan Evades Detection appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
SitusAMC Breach Exposes Data From 100+ Financial Institutions
A breach at SitusAMC exposed data from over 100 financial institutions, heightening concerns about third-party risk in banking. The post SitusAMC Breach Exposes Data From 100+ Financial Institutions appeared first on eSecurity Planet. This article has been indexed from eSecurity…
Tanium Converge: AI Comes to Enterprise Security, IT Needs
Tanium unveils AI-driven Autonomous IT, deeper integrations, and agentic security tools at Converge 2025 to help enterprises counter evolving threats. The post Tanium Converge: AI Comes to Enterprise Security, IT Needs appeared first on eSecurity Planet. This article has been…
Critical Firefox Bug Leaves 180M Users Exposed
A hidden WebAssembly bug in Firefox exposed 180 million users to potential code execution. The post Critical Firefox Bug Leaves 180M Users Exposed appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Critical SonicOS SSLVPN Vulnerability Allows Remote Firewall Crashes
A critical SonicOS SSLVPN flaw lets remote attackers crash SonicWall firewalls without authentication. The post Critical SonicOS SSLVPN Vulnerability Allows Remote Firewall Crashes appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
FCC Drops Telecom Cyber Rules Despite China Espionage Warnings
Experts say the FCC’s rollback of cyber rules leaves U.S. telecom networks exposed to escalating China-linked espionage threats. The post FCC Drops Telecom Cyber Rules Despite China Espionage Warnings appeared first on eSecurity Planet. This article has been indexed from…
WrtHug Attack Hijacks Tens of Thousands of ASUS Home Routers
Operation WrtHug has hijacked tens of thousands of ASUS routers for global espionage. The post WrtHug Attack Hijacks Tens of Thousands of ASUS Home Routers appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Grafana SCIM Flaw Allows Admin Impersonation and Full Takeover
A severe SCIM vulnerability in Grafana allows for user and admin impersonation. The post Grafana SCIM Flaw Allows Admin Impersonation and Full Takeover appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
These ‘Gentlemen’ Aren’t Gentle: Rapidly Evolving Ransomware Threat
“The Gentlemen” ransomware gang is rapidly becoming one of 2025’s most dangerous threats. The post These ‘Gentlemen’ Aren’t Gentle: Rapidly Evolving Ransomware Threat appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Hidden Comet Browser API Allowed Dangerous Local Command Execution
A hidden MCP API in Comet let extensions execute local commands on user devices. The post Hidden Comet Browser API Allowed Dangerous Local Command Execution appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Allies Sanction Russian Network Behind Major Cyberattacks
The UK, US, and Australia sanctioned Media Land, a Russian network enabling major cyberattacks. The post Allies Sanction Russian Network Behind Major Cyberattacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…