The Brutalist Report

Bleeping Computer

• Ukraine identifies infostealer operator tied to 28,000 stolen accounts [15d]
• Hackers bypass SonicWall VPN MFA due to incomplete patching [15d]
• Grafana breach caused by missed token rotation after TanStack attack [15d]
• Identity Alone Isn't Enough: Why Device Security Has to Share the Load [15d]
• Drupal critical update to fix bug with high exploitation risk [15d]
• Exploit released for new PinTheft Arch Linux root escalation flaw [15d]
• GitHub confirms breach of 3,800 repos via malicious VSCode extension [16d]
• Microsoft shares mitigation for YellowKey Windows zero-day [16d]
• GitHub investigates internal repositories breach claimed by TeamPCP [16d]