NewsBleepingComputer
Glassworm botnet disrupted after resilient C2 infrastructure takedown
Teaser from the source
The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana blockchain transactions and the BitTorrent DHT network. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on infrastructure
Other advisories
- Not ratedosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2026-EV96739Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure
- Not ratedosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2026-WG10458Security fix for GHSA-hrxh-6v49-42gf applied in: rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.4-r2, newrelic-infrastructure-agent 1.78.1-r2, lvm-driver 1.10.0-r1, lvm-driver 1.10.0-r2, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r0, fulcio-fips 1.5.1-r1, fluent-operator-fips 3.10.0-r2, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.14.8-r2, temporal-server 1.28.4-r1, temporal-server 1.29.7-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, tempo-fips 3.0.2-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-csi-external-resizer-fips 2.2.1-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, multus-cni-fips 4.3.0-r1
- Not ratedosv:CLEANSTART-2026-LX06010Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack
- MediumCVE-2026-70380A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacke…
- HighCVE-2026-19953Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
- HighCVE-2026-113345Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: fehlerhafte Standardberechtigungen
Other news entries
- CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationNewsThe Hacker News
- Railway’s AI agents go off the track on a rival’s networkNewsCSO Online
- MetaMask says recent attack didn't affect wallet infrastructureNewsBleepingComputer
- UK Warns Its Critical Infrastructure Faces Grave RiskNewsDark Reading
- Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login walletsBreachpwn.watch
- Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA SaysNewsThe Hacker News
- Google, Partners Disrupt 1.3 Million-Device-Strong XCPE BotnetNewsDark Reading
- CISA flags WordPress RCE flaw as actively exploited in attacksNewsBleepingComputer
ID