Pwnspectrum

A shadowy group, TrueChaos, has launched a devastating zero-day attack targeting Southeast Asian government networks using the TrueConf video conferencing software. This isn't just a vulnerability; it's a calculated assault on national security, exposing critical infrastructure to potential espionage and disruption. The attackers are leveraging a lack of proper integrity checks, exploiting a critical flaw to gain a foothold and move laterally. Defense teams are scrambling to contain the spread and mitigate the damage, a race against time.

Imagine a meticulously crafted digital weapon, waiting for an unsuspecting admin user to open a seemingly harmless file. That's exactly what’s happening with CVE-2026-35056 in XenForo. A malicious actor can now remotely execute code on your server simply by opening a file, turning your entire network into a potential target. This isn't about brute-force attacks; it's about exploiting trust and a single, devastating flaw.

Sixth's attempt at automated command execution – a noble goal – has created a gaping hole in security. The 'execute safe commands' option is now a gateway for attackers to unleash arbitrary code without authentication, essentially giving them complete control over your system. This highlights the critical need for robust validation and controls around automated processes, a lesson learned the hard way.

GitHub Copilot, the AI-powered coding assistant, has become the target of a sophisticated prompt injection attack. A clever attacker exploited a vulnerability to execute arbitrary code on the developer's own machine, highlighting the risks of blindly trusting AI tools. This isn't just a coding error; it's a fundamental breach of trust, revealing the potential for AI to be weaponized.

Oracle's Fusion Middleware is under siege! Attackers have discovered a critical Remote Code Execution (RCE) flaw, allowing them to bypass authentication and take complete control of your systems. This is a direct attack on a core business application, exposing sensitive data and crippling operations. It’s a stark reminder that even established platforms aren’t immune to sophisticated threats.

CISA has issued a critical warning: Palo Alto Networks PAN-OS is being actively attacked. Attackers are exploiting a vulnerability to gain unauthorized access to your network, a high-stakes race against time to patch your systems before it's too late. The stakes are high - potential data breaches, operational disruption, and lasting damage to your reputation.

Millions of developers unknowingly installed a malicious dependency into their Axios HTTP client packages, turning their codebases into potential backdoors. This supply chain attack demonstrates the devastating consequences of trusting third-party libraries and highlights the need for rigorous dependency management and vulnerability scanning.

Anthropic accidentally leaked the source code for Claude Code, a closed-source AI model, into the npm registry. This is a major security breach, potentially exposing intellectual property and allowing attackers to reverse-engineer and exploit the model. It underscores the dangers of carelessness in software development and the importance of robust access controls.

TeamPCP, a notorious cyber threat actor, has launched a widespread supply chain attack targeting Checkmarx's KICS Code Scanner and VS Code plugins, alongside the LiteLLM AI library. This is a coordinated effort to disrupt development workflows and steal sensitive data, highlighting the vulnerability of software supply chains and demanding greater vigilance.

The supply chain attack on LiteLLM, a multifunctional AI gateway, reveals the hidden dangers lurking within the rapidly expanding ecosystem of AI agents. Attackers exploited vulnerabilities to inject malicious code, demonstrating that even seemingly innocuous AI tools can be weaponized, demanding a focus on secure AI development practices.

CISA has just added two more vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on active exploitation. This is a clear signal that these flaws are being actively targeted by attackers, demanding immediate patching and mitigation efforts. It’s a race against time to protect your systems before they become victims.

Sophos XDR delivers 100% detection coverage in the latest MITRE ATT&CK Evaluation, a remarkable achievement that demonstrates the power of advanced threat detection and response capabilities. This is a significant milestone for cybersecurity, offering unparalleled protection against a wide range of attacks.

A technical analysis of the SparrowDoor malware reveals a new variant, highlighting the ongoing sophistication of cyber threats and the need for continuous monitoring and detection. This is a stark reminder that attackers are constantly evolving their tactics, requiring defenders to stay one step ahead.

Google's Antigravity IDE, born from a Windsurf licensing deal, has revealed a critical security vulnerability. This experiment exposes the dangers of blindly trusting AI tools and underscores the importance of rigorous testing and validation before deploying new technologies.

Check Point Research has uncovered Operation TrueChaos, a targeted attack campaign against Southeast Asian government networks using the TrueConf video conferencing software. This is a serious threat to national security, demonstrating the vulnerability of legitimate software to be exploited for malicious purposes.

The Axios NPM package has been hijacked to deploy malware, highlighting the critical importance of managing dependencies and the potential risks associated with open-source libraries. This is a sophisticated attack that demonstrates the power of supply chain attacks to inflict widespread damage.

The FBI and CISA have issued an advisory on the deployment of LummaC2 malware, used to exfiltrate sensitive data from organizations. This highlights the evolving tactics of cybercriminals and the need for proactive threat intelligence and robust security controls.

CISA's involvement in an incident response engagement at a U.S. federal civilian executive branch (FCEB) agency underscores the importance of early detection and rapid response capabilities. This real-world example highlights the need for robust security practices and proactive threat monitoring.

The Biosig Project libbiosig ABF parsing vulnerability represents a critical flaw in a widely used bioinformatics tool. The vulnerability allows unauthorized access to sensitive data, highlighting the importance of secure coding practices and rigorous vulnerability testing.

A remote code execution (RCE) vulnerability has been discovered in XenForo, allowing attackers to take complete control of your server. This is a critical flaw that demands immediate patching and mitigation efforts to protect your network from potential compromise.

TeamPCP is once again implicated in a widespread supply chain attack, targeting Checkmarx's KICS Code Scanner and VS Code plugins. This highlights the ongoing threat posed by sophisticated cyber actors and the need for greater vigilance in managing software dependencies.

Cisco SD-WAN devices are under active attack, with vulnerabilities CVE-2026-20127 and CVE-2022-20775 being exploited. This is a critical security breach that demands immediate patching and mitigation efforts to prevent unauthorized access to your network.

CISA has issued a critical warning regarding a vulnerability in Palo Alto Networks PAN-OS, which is being actively exploited by attackers. This is a high-stakes situation, demanding immediate action to patch your systems before they are compromised.