Fri, Jul 24 · 06:01 AM CDT

Summary
Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent

Summary
Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and t

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. Th

Summary
Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code. Every version bef

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious program that's dressed up as a Notepad++ plugin to compromise Windows systems. The activity has been attributed by the agency to a threa

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 4 hours ago.

Summary
Collected from the Infosecurity Magazine news page during the latest run.