How Command Injection Vulnerability in OpenAI Codex Leads to GitHub Token Compromise

Pixel Perfect: Sold Extension Injects Code Through Pixel

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

Microsoft Patches Critical RCE Flaw in Windows KDC Proxy

Microsoft has patched CVE-2024-43639, a critical remote code execution (RCE) vulnerability in Windows KDC Proxy.

Zabbix Warns of Critical SQL Injection Flaw

The Zabbix vulnerability could allow attackers to escalate privileges and take over vulnerable Zabbix servers.

Two Apple Flaws Used in Attacks on Intel-Based Macs

Apple has rushed out emergency patches for two zero-day flaws in Macs, iPhones and iPads.

VMware Confirms Exploitation of vCenter Server Bugs

VMware said threat actors are now exploiting previously disclosed flaws (CVE-2024-38812 and CVE-2024-38813) in vCenter Server.

Okta Fixes Odd Bug That Allowed Any Password to Be Accepted

The flaw required a username of 52 characters or more

Fortinet: Critical FortiManager Flaw Exploited in Attacks

Fortinet is warning of a critical flaw in FortiManager, which has been exploited.

Microsoft Scripting Engine Flaw Exploited in Malware Attacks

The (now-patched) Microsoft flaw was being exploited by North Korean threat actors earlier this year, according to a new alert.

Mozilla, Tor Project Warn Users of Exploited Firefox Flaw

Mozilla is urging Firefox users to apply patches for a critical-severity vulnerability (CVE-2024-9680) that is being exploited in the wild.