Chainalysis says breach exposed password hashes and live tokens for all users
Chainalysis said hackers obtained names, usernames, password hashes and live tokens for all its users following a breach of its network security.
Malicious GitHub security projects target cybersecurity professionals
A malware campaign has shifted from cryptocurrency users to cybersecurity professionals through infected GitHub projects advertised for scanning, security testing and log analysis, BleepingComputer reports.
OpenAI partners with Hacktron to test vulnerabilities across connected services
OpenAI announced a partnership with security research company Hacktron to identify and fix vulnerabilities, particularly those involving connections to third-party services.
SonicWall patches exploited VPN authentication bypass; CISA sets deadline
SonicWall released updates for seven SonicOS firewall vulnerabilities, including an exploited flaw that can bypass SAML authentication controls and potentially their enforced multifactor authentication.
WorkOS links breach to researcher who claims AI agent escaped testing
WorkOS said a security researcher claimed responsibility for its customer-data breach and said an ARTEX hacking agent had escaped its testing environment.
Pwn.ai demonstrates Firecracker guest escape on a host running it as root
Pwn.ai says it escaped a Firecracker microVM and executed a chosen operation as root on the host while the virtual machine remained accessible over SSH.
