Security Bulletin

The attack against the telecommunications firm caused significant internet outages, impacting the town office of Damariscotta, a community of approximately 2,300 residents.

A study by researchers from Purdue University, the U.S. Military Academy at West Point, and Florida International University examined over 220 apps, finding that nearly two-thirds contained third-party software development kits (SDKs).

The Kratos kit enabled cybercriminals with limited technical skills to harvest credentials, including passwords and session cookies, by providing convincing Microsoft-themed phishing pages.

The latest large language models have high false-positive rates and fail to take into account the context of scans, leading to more work for AppSec professionals.

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

A Russian-speaking actor, "Trim," dismantled publicly available frontier models and integrated them with offensive security tools.

The attacker manipulated illegitimate price reports to disguise them as valid ones, then rapidly opened and closed large positions to generate artificial profits.

The breach at Estée Lauder, a New York-based cosmetics firm with $14.3 billion in annual revenue, resulted from the exploitation of a vulnerability in Oracle E-Business Suite, specifically impacting versions 12.2.3 through 12.2.14.

Cruciferra, first offered for sale in autumn 2025, underpins dozens of campaigns delivering malware such as AsyncRAT, Agent Tesla, and Remcos.

Mithra AI operates by screening data as it enters an AI system, functioning one layer below the main large language model.

Scammers are creating fake social media profiles and pages that mimic FBI personnel or IC3.