24,000 Data Center Servers Sit Wide Open. The Flaw Is Older Than Some of the Admins Guarding Them.
A newly surfaced BMC vulnerability has left roughly 24,000 data center servers open to full takeover, and ransomware crews are already exploiting it.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
How the FBI Broke LockBit by Breaking Its Word to Criminals
The LockBit takedown succeeded by breaking affiliate trust, and that one move crippled the biggest ransomware group of its time.
Confused Deputy Flaws Let Low-Level Users Hijack Azure and Google Cloud
Two confused deputy cloud flaws in Azure and Google Cloud let low-privilege users grab full admin control, and one is still unpatched.
5 AI Coding Tools Invented the Same 127 Fake Packages. Dozens Are Still Up for Grabs
New research shows slopsquatting is still a live risk, because five different AI models keep inventing the exact same fake software packages.
Researchers Walk an AI Agent Out of Its Sandbox and Onto the Host Mac
A new AI agent sandbox escape shows how one kernel bug plus a shared host mount can hand an agent the keys to your whole machine.
Just Opening the Email Was Enough: Russian Hackers Turned a Zimbra Zero-Day Into a Silent Mail Thief
A Zimbra zero-day gave Russian state hackers a way into government mailboxes without a single click from the victim.
A Nine Year Old Linux Bug Just Handed Ordinary Users The Keys To Root
The RefluXFS Linux kernel flaw sat quietly in XFS since 2017, and it hands ordinary users full root.
Operation Olympus Blade: Inside the Kratos Takedown
The Kratos phishing takedown pulled 200 servers offline, but the 1,800 criminals who rented the kit are still out there shopping for a replacement.
Researchers Trace Malware Campaign to North Korean Hiring Scheme
North Korean operators are running a ClickFake Interview campaign that turns a fake camera error into a full system takeover.
The Machines Broke Out of the Lab, and Nobody Told Hugging Face
The first confirmed AI agent cyberattack on a major platform did not come from a criminal gang. It came from a lab running its own safety...
Windows Patches Got Stuck. The Culprit Was Microsoft Itself.
A WSUS sync failure stalled Windows patches right at Patch Tuesday, and Microsoft finally has a manual fix for it.
Linux Just Fixed 400 Bugs in a Day. Now Comes the Hard Part.
A wave of Linux kernel vulnerabilities got patched in one day, and AI helped find them faster than teams can install them.