NewsCisco Talos
A quiet week in infosec <.<
Teaser from the source
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Cisco TalosMore on infosec
Other advisories
- Not ratedosv:CLEANSTART-2025-DX00048OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg
- MediumCVE-2026-39961Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource in github.com/aiven/aiven-operator
- MediumCVE-2026-39961Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
- Not ratedosv:CVE-2026-39961Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
- HighCVE-2017-15377Openinfosecfoundation Suricata: Sicherheitslücke
- HighCVE-2017-15377Openinfosecfoundation Suricata: Sicherheitslücke
- CriticalCVE-2015-8954Openinfosecfoundation Suricata: Sicherheitslücke
- CriticalCVE-2015-8954Openinfosecfoundation Suricata: Sicherheitslücke
Other news entries
- In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad securityNewsThe Register — Security
- CISA confirms PHP2Shell under attack as researchers clock successful exploitsNewsThe Register — Security
- Greedy ransomware crews return for seconds after victims cough up first extortion paymentsNewsThe Register — Security
- AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expertNewsThe Register — Security
- Infosec professionals sour on automated pentesting toolsNewsThe Register — Security
- Five Eyes spooks warn AI means infosec incidents can become ‘major operational and financial crises’NewsThe Register — Security
- Gizmodo readers hit with ClickFix malware prompts after account compromiseNewsThe Register — Security
- Anatomy of a retail ransomware attack: Tabletop simulates modern mayhem methodsNewsCSO Online
Source: https://blog.talosintelligence.com/a-quiet-week-in-infosec/
ID