CyberPulse Cybersecurity News, with Source Links
FA
Securelist (Kaspersky)

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss how to detect such intrusions.

Malware & Threats Vulnerabilities & Zero-Day Data Breach Ransomware Operating Systems Incident Response & Forensics
Read the full article at Securelist (Kaspersky) Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CSO Online

Railway’s AI agents go off the track on a rival’s network

AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questione…

Vulnerabilities & Zero-Day Data Breach Cloud Security
Source
Ubuntu Security Notices

USN-9003-1: Linux kernel (NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

Vulnerabilities & Zero-Day IoT & OT Security Mobile Development
Source
Ubuntu Security Notices

USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010) Several security issues were discovered in the Linux kernel. An attacker could possibly use these t…

Vulnerabilities & Zero-Day Botnet & DDoS Cloud Computing
Source