Software Samaritan revamps borked Indian certs to block smart TV ads

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Clien…

ARTEX and AI Attack Tools: Why Threat Intelligence Must Originate From First-Party Data

How ARTEX spread: A new name every week ARTEX is an autonomous, multi-agent AI penetration testing and offensive framework. It’s also open-source – and went from a GitHub release to in-the-wild attacks in under three months. CrowdStrike tied it to intrusions at South Korean financial institutions on October 7, and Microsoft tied it to Storm-0940’s […] The post ARTEX and AI Attack Tools: Why Threat Intelligence Must O…

Progress Software security advisory (AV26-1148)

International operation dismantles malware networks, exposes 6.4 million stolen credentials

The Operation Endgame action dismantled the loaders, remote access trojans and infostealers that give ransomware gangs their way into corporate networks. The post International operation dismantles malware networks, exposes 6.4 million stolen credentials appeared first on CyberScoop.