SAP NetWeaver Vulnerability Used in First Auto-Color Malware Attack on US Firm
Source: https://hackread.com/sap-netweaver-vulnerability-auto-color-malware-us-firm/
macOS Sploitlight Vulnerability Exposes Apple Intelligence-Cached Data to Attackers, Microsoft
Source: https://hackread.com/macos-sploitlight-flaw-apple-intelligence-cached-data/
How We Accidentally Discovered a Remote Code Execution Vulnerability in ETQ Reliance
Source: https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/
New TeleMessage SGNL Vulnerability Is Actively Being Exploited by Attackers
Source: https://hackread.com/telemessage-sgnl-flaw-actively-exploited-by-attackers/
Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act
Source: https://thehackernews.com/2025/07/google-ai-big-sleep-stops-exploitation.html
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
Researching MS-RPC interfaces, however, poses several challenges. Manually analyzing RPC services can be time-consuming, especially when faced with hundreds of interfaces spread across different processes, services and accessible through various endpoints.
This post will dive into the new algorithm/method I designed and implemented for fuzzing. It will describe some results and why these results differ from the default fuzzing approach. Apart from the additional implemented features, the tool will be released with this post as well! All security researchers from over the world can now freely use this tool in their research.
McDonald’s McHire Vulnerability Leaked Data of 64 Million Job Seekers
Source: https://hackread.com/mcdonalds-mchire-vulnerability-job-seekers-data-leak/
A critical double-free vulnerability has been discovered in the pipapo set module of the Linux kernel’s NFT subsystem. An unprivileged attacker can exploit this vulnerability by sending a specially crafted netlink message, triggering a double-free error with high stability. This can then be leveraged to achieve local privilege escalationץ
How I Discovered a Libpng Vulnerability 11 Years After It Was Patched
Source: https://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/
I covered a fascinating post by Alexander Moch at ERNW about a boot-level Linux vulnerability that lets attackers inject code from the initramfs debug shell. Even with Secure Boot and encryption, a few key presses can drop you to a shell and allow persistent malware to be added.
Luckily, the fix is simple and involves kernel parameters. I break it down here:
https://nerds.xyz/2025/07/linux-initramfs-security-flaw-secure-boot-bypass/
Curious what others are doing to harden this layer.
Kerio Control has a design flaw in the implementation of the communication with GFI AppManager, leading to an authentication bypass vulnerability in the product under audit. Once the authentication bypass is achieved, the attacker can execute arbitrary code and commands.
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
Source: https://thehackernews.com/2025/06/cisa-warns-of-active-exploitation-of.html
A new backdoor named Pickai is exploiting ComfyUI vulnerabilities to spread and steal sensitive AI data. Developed in C++, Pickai offers remote command execution and reverse shell capabilities with strong persistence and evasion techniques. It uses multiple C2 servers for redundancy and has infected nearly 700 devices globally. The malware is hosted on Rubick.ai, an AI e-commerce platform serving major brands, posing significant supply chain risks. Pickai employs various obfuscation methods, including string encryption, process disguise, and multiple persistence mechanisms. Its network communication uses a three-tier timing strategy for C2 communication and device information reporting.
