Collecting Cyber-News from over 60 sources

Tag: open-source

Mapping the Unknown: Introducing Pius for Organizational Asset Discovery

Mar 13, 2026 8:10 PM

Tags: attack, open-source, penetration-testing, service

Asset discovery is an essential part of Praetorian’s service delivery process. When we are engaged to carry out continuous external penetration testing, one key action is to build and maintain a thorough target asset inventory that goes beyond any lists or databases provided by the system owner. Pius is our open-source attack surface mapping tool……
DR-DOS rises again rebuilt from scratch, not open source

Mar 12, 2026 11:10 AM

Tags: dos, open-source

Project claims legal clarity and zero legacy code, but offers binaries only First seen on theregister.com Jump to article: www.theregister.com/2026/03/11/drdos_9/
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

Mar 12, 2026 11:10 AM

Tags: advisory, open-source

ENISA’s first Technical Advisory on Secure Package Managers helps developers safely use third-party packages. ENISA has released its first Technical Advisory on Package Managers, focusing on how developers can safely consume third-party packages. The document (March 2026, v1.1) follows public feedback incorporating 15 contributions from stakeholders, experts, and the open-source community. >>This document focuses on…
Salesforce tracks possible ShinyHunters campaign targeting its users

Mar 11, 2026 4:48 PM

Tags: cloud, malicious, open-source, tool

Salesforce warns users of an uptick in malicious activity targeting Experience Cloud customers with misconfigured user settings via an open source tool First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366639851/Salesforce-tracks-possible-ShinyHunters-campaign-targeting-its-users
Cloud-audit: Fast, open-source AWS security scanner

Mar 11, 2026 7:47 AM

Tags: cloud, open-source

Running AWS security audits without a dedicated security team typically means choosing between enterprise platforms with per-check billing and generic open-source scanners … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/11/cloud-audit-open-source-aws-security-scanner/
APT28 hackers deploy customized variant of Covenant open-source tool

Mar 10, 2026 11:46 AM

Tags: espionage, exploit, framework, group, hacker, open-source, russia, threat, tool

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt28-hackers-deploy-customized-variant-of-covenant-open-source-tool/
Gogs Flaw Could Let Attackers Quietly Overwrite Large File Storage Data

Mar 10, 2026 11:46 AM

Tags: attack, cve, cyber, data, exploit, flaw, open-source, software, supply-chain, threat, vulnerability

A critical security vulnerability has been identified in Gogs, a widely used open-source self-hosted Git service. / Tracked as CVE-2026-25921, this flaw allows unauthenticated attackers to silently overwrite Git Large File Storage (LFS) objects across any repository. By exploiting a lack of content verification, threat actors can conduct stealthy software supply-chain attacks, replacing legitimate project…
Cloudflare Pingora Flaws Enable Request Smuggling and Cache Poisoning Attacks

Mar 10, 2026 11:46 AM

Tags: advisory, attack, cve, cyber, data-breach, flaw, Internet, network, open-source, vulnerability

In a recent security advisory, Cloudflare disclosed multiple HTTP request smuggling and cache poisoning vulnerabilities in its open-source Pingora framework. Tracked under the identifiers CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836, these flaws specifically impact standalone Pingora deployments that are exposed directly to the internet as ingress proxies. Cloudflare has explicitly confirmed that its own Content Delivery Network…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Mar 10, 2026 9:48 AM

Tags: access, cloud, exploit, open-source, threat, tool

Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector.The activity, per the company, involves the exploitation of customers’ overly permissive Experience Cloud guest user configurations to obtain access to sensitive…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Meta’s AI Safety Chief Couldn’t Stop Her Own Agent. What Makes You Think You Can Stop Yours?

Mar 9, 2026 8:48 PM

Tags: ai, exploit, github, microsoft, open-source, threat

Two incidents from the last two weeks of February need to be read together, because separately they look like cautionary anecdotes and together they look like a threat doctrine. Incident One: An autonomous bot called hackerbot-claw attacked seven major open-source repositories”, Microsoft, DataDog, the CNCF, and Trivy among them. It exploited a well-documented GitHub Actions…
ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

Mar 9, 2026 8:48 PM

Tags: attack, data, mandiant, open-source, tool

And they abused a Mandiant-developed open source tool in the attacks First seen on theregister.com Jump to article: www.theregister.com/2026/03/09/shinyhunters_claims_more_highprofile_victims/
Chinese Cyber Threat Lurks In Critical Asian Sectors for Years

Mar 9, 2026 4:46 PM

Tags: china, cyber, linux, malware, open-source, threat, tool, windows

An undefined Chinese-speaking actor wields a combo of custom malware, open source tools, and LOTL binaries against Windows and Linux, likely for spying. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/chinese-cyber-threat-critical-asian-sectors
Cyber Espionage Group CL-UNK-1068 Linked to China Targets Asian Infrastructure

Mar 9, 2026 1:47 PM

Tags: china, cyber, espionage, government, group, infrastructure, law, malware, open-source, technology, threat

A highly sophisticated cyber espionage group, designated as CL-UNK-1068, has been actively targeting critical infrastructure across South, Southeast, and East Asia since at least 2020. Originating from China, the threat actors focus on high-value sectors, including aviation, energy, government, law enforcement, technology, and telecommunications. The attackers use a versatile mix of custom malware, open-source utilities,…
1-Click ZITADEL Vulnerability Could Allow Full System Takeover

Mar 9, 2026 10:47 AM

Tags: access, cve, cyber, flaw, identity, login, malicious, open-source, vulnerability

A critical Cross-Site Scripting (XSS) vulnerability has been discovered in ZITADEL, a popular open-source identity and access management platform. Tracked as CVE-2026-29191 with a Critical severity rating, this flaw resides in the platform’s login V2 interface, specifically within the /saml-post endpoint. It allows unauthenticated remote attackers to execute malicious JavaScript directly within a user’s browser. With a…
ExifTool Vulnerability Lets Malicious Images Trigger macOS Code Execution

Mar 9, 2026 8:47 AM

Tags: computer, cyber, data, macOS, malicious, open-source, tool, vulnerability

ExifTool is a ubiquitous open-source solution for reading, writing, and editing image metadata. It’s the go-to tool for photographers and digital archivists, and is widely used in data analytics, digital forensics, and investigative journalism. Can a computer really get infected just by processing an image even on macOS, often (incorrectly) thought to be immune to…
Open-source tool Sage puts a security layer between AI agents and the OS

Mar 9, 2026 7:47 AM

Tags: ai, open-source, tool

Autonomous AI agents running on developer workstations execute shell commands, fetch URLs, and write files with little or no inspection of what they are doing. Open-source … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/09/open-source-tool-sage-security-layer-ai-agents/
Critical ExifTool Vulnerability Allows Malicious Images to Execute Code on macOS

Mar 9, 2026 7:47 AM

Tags: cve, cyber, flaw, kaspersky, macOS, malicious, malware, open-source, vulnerability

Many users believe macOS is inherently resistant to malware, but a newly discovered vulnerability proves otherwise. Kaspersky’s Global Research and Analysis Team (GReAT) recently uncovered a critical flaw, tracked as CVE-2026-3102, within ExifTool. ExifTool is a widely popular open-source application and library for extracting and editing file metadata. If a macOS user processes a specially…
WiFi Signals Can Track Human Activity Through Walls by Mapping Body Keypoints

Mar 9, 2026 6:48 AM

Tags: ai, cyber, github, open-source, privacy, tool, wifi

In late February 2026, an open-source project named RuView (formerly WiFi DensePose) surged to the top of GitHub trending lists. This edge AI system proves that everyday WiFi signals can track human movement, estimate body poses, and monitor vital signs through walls, all without using a single camera. While marketed as a privacy-friendly tool for…
Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Mar 8, 2026 10:48 AM

Tags: ai, framework, malware, open-source, penetration-testing, update, WeeklyReview

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: BlacksmithAI: Open-source AI-powered penetration testing framework … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/08/week-in-review-weaponized-oauth-redirection-logic-delivers-malware-patch-tuesday-forecast/
Chardet dispute shows how AI will kill software licensing, argues Bruce Perens

Mar 7, 2026 8:47 PM

Tags: ai, open-source, risk, software

Alarm bells are ringing in the open source community, but commercial licensing is also at risk First seen on theregister.com Jump to article: www.theregister.com/2026/03/06/ai_kills_software_licensing/
Building Bridges, Breaking Pipelines: Introducing Trajan

Mar 6, 2026 7:50 PM

Tags: attack, detection, github, gitlab, open-source, risk, tool, vulnerability

TL;DR: Trajan is an open-source CI/CD security tool from Praetorian that unifies vulnerability detection and attack validation across GitHub Actions, GitLab CI, Azure DevOps, and Jenkins in a single cross-platform engine. It ships with 32 detection plugins and 24 attack plugins covering poisoned pipeline execution, secrets exposure, self-hosted runner risks, and AI/LLM pipeline vulnerabilities. It……
Apache ActiveMQ Flaw Enables DoS Attacks via Malformed Network Packets

Mar 6, 2026 12:47 PM

Tags: apache, attack, cve, cyber, data, dos, flaw, malicious, network, open-source, service, vulnerability

Security researchers have uncovered a significant vulnerability in Apache ActiveMQ, a popular open-source message broker used by enterprises to route data between applications. Tracked as CVE-2025-66168, this security flaw allows malicious actors to trigger unexpected broker behavior and potential denial-of-service (DoS) conditions by sending specifically crafted, malformed network packets. A successful attack against a message…
AWS-LC Flaw Exposes Amazon Users to Attacks by Bypassing Certificate Chain Validation

Mar 6, 2026 10:47 AM

Tags: attack, cloud, cyber, flaw, open-source, risk, vulnerability

Amazon issued a critical security bulletin (2026-005-AWS) detailing three high-severity vulnerabilities in AWS-LC, its open-source cryptographic library. Discovered through a coordinated disclosure process with the AISLE Research Team, these flaws pose a serious risk to cloud infrastructure. Developers rely heavily on AWS-LC as a general-purpose library to secure digital communications. Because of this widespread use,…
Account enumeration in the wild: analyzing a real-world Spotify enumeration tool

Mar 5, 2026 4:46 PM

Tags: open-source, tool

In this blog post, we study the Spotify-Account-Checker open source project. The author describes it as: “An automated tool for checking the validity of Spotify accounts with proxy support, multi-threading capabilities, and Discord Rich Presence integration.” At first glance, checking whether an account exists may look harmless. It First seen on securityboulevard.com Jump to article:…
FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289)

Mar 5, 2026 12:47 PM

Tags: email, open-source, rce, remote-code-execution, vulnerability

A newly discovered vulnerability (CVE-2026-28289) in the open-source help desk platform FreeScout could allow attackers to take over vulnerable servers by sending a specially … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/05/freescout-vulnerability-cve-2026-28289/
FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289)

Mar 5, 2026 12:47 PM

Tags: email, open-source, rce, remote-code-execution, vulnerability

A newly discovered vulnerability (CVE-2026-28289) in the open-source help desk platform FreeScout could allow attackers to take over vulnerable servers by sending a specially … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/05/freescout-vulnerability-cve-2026-28289/
How a Music Streaming CEO Built an Open-Source Global Threat Map in His Spare Time

Mar 5, 2026 11:47 AM

Tags: ceo, data, detection, open-source, threat

Frustrated by fragmented war news, Anghami’s Elie Habib built World Monitor, a platform that fuses global data, like aircraft signals and satellite detections, to track conflicts as they unfold. First seen on wired.com Jump to article: www.wired.com/story/world-monitor-elie-habib/
14 old software bugs that took way too long to squash

Mar 5, 2026 8:46 AM

Tags: access, api, attack, authentication, automation, bug-bounty, communications, computer, control, credentials, cve, cvss, cyber, data, data-breach, dns, dos, encryption, exploit, flaw, hacker, Hardware, infosec, infrastructure, Internet, kaspersky, linux, malicious, malware, microsoft, mitigation, network, nist, open-source, password, programming, remote-code-execution, risk, service, software, stuxnet, supply-chain, technology, theft, threat, tool, update, usa, vulnerability, windows, zero-day

Age: 30 yearsDate introduced: 1995Date fixed: February 2026Researchers unearthed a legacy flaw in the widely used libpng open-source library that had existed since the technology was first released more than 30 years ago.The heap buffer overflow vulnerability (CVE-2026-25646) meant that applications using the flawed software would crash when presented with a maliciously constructed PNG raster…