Self-managed GitLab systems missing the June security update and internet-exposed PTC Windchill or FlexPLM deployments require immediate attention: public GitLab exploit code is available, while Cl0p affiliates are using an unauthenticated RCE chain for data theft and extortion. Security teams should also account for the shift toward real-time phishing session hijacking and assess exposure to the reported Rockwell Arena code-execution flaws. Prompt patching, credential monitoring, and review of third-party incidents remain the practical priorities.
This legacy edition is awaiting expanded Slugnet analysis and is not yet indexed.
Audio briefing
A spoken version of today’s prioritized cybersecurity briefing.
The audio edition is not available yet.
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a pro
This legacy edition predates Slugnet’s expanded analytical assessment.
For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an opportunity arose. That model is changing. Recen
This legacy edition predates Slugnet’s expanded analytical assessment.
Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and FlexPLM deployments as part of a new data extortion campaign. "Attackers chain a pre-authentication infor
This legacy edition predates Slugnet’s expanded analytical assessment.
The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the ce
This legacy edition predates Slugnet’s expanded analytical assessment.
ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has connectivity issues worldwide. [...]
This legacy edition predates Slugnet’s expanded analytical assessment.
A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The post Rockwell Patches Code Execution Flaws in Arena Simulation Software appeared first on SecurityWeek .
This legacy edition predates Slugnet’s expanded analytical assessment.
Escalating threats are forcing boards to prioritize security, but communication gaps persist. Boards and security teams each say they need more support to bridge the divide.
This legacy edition predates Slugnet’s expanded analytical assessment.
Lower catch this year . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
This legacy edition predates Slugnet’s expanded analytical assessment.
OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers. [...]
This legacy edition predates Slugnet’s expanded analytical assessment.
The hacking of Hugging Face by a rogue OpenAI agent is significant, but unsurprising — and preventing the next AI model escape will be difficult, at best.
This legacy edition predates Slugnet’s expanded analytical assessment.