Three LiteLLM flaws let low-privilege users gain admin access and run code, exposing AI keys, secrets, prompts, and responses ...

The Windows-based CryptoBandits cryptocurrency clipper blends data exfiltration and remote code execution in a backdoor.

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...

Raspberry Pi installs like Jellyfin and Navidrome can cut your streaming costs, as can free alternative cloud data hosting ...

Microsoft discovered a self-spreading USB worm active since February that monitors clipboards for crypto wallets and routes stolen data through Tor.

In the modern digital industry, web scraping has become critically necessary for developers. Companies must rely on the results of objective market research, ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

This data series is part of the Center for Monetary Research. This site presents a weekly and monthly series of the proxy funds rate, following Doh and Choi (2016), Choi, Doh, Foerster, and Martinez ...

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced ...