The Brutalist Report

Bleeping Computer

• Path traversal flaw in AI dev platform Langflow exploited in attacks [43d]
• The ‘Miasma’ worm source code briefly leaked on GitHub [43d]
• GitHub announces npm security changes to tackle supply-chain attacks [43d]
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks [43d]
• China-linked JDY botnet expands targeting of U.S. military networks [43d]
• The 5 Best Practices for Secure Identity Verification [43d]
• Microsoft patches Exchange Server zero-day exploited in attacks [43d]
• Microsoft: Some Windows PCs fail to install latest monthly updates [43d]
• Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days [43d]
• Ivanti: Max severity Sentry flaw allows code execution as root [43d]
• Anthropic rolls out Claude Fable 5, but it's available for a limited time [44d]