Collecting Cyber-News from over 60 sources

Tag: open-source

LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks

Mar 17, 2026 2:10 PM

Tags: access, attack, corporate, malware, open-source, ransomware

The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a malware loader based on the open-source Deno runtime for JavaScript and TypeScript. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/leaknet-ransomware-uses-clickfix-and-deno-runtime-for-stealthy-attacks/
Microsoft Launches AI-Driven Troubleshooting for Purview Data Lifecycle Tools

Mar 17, 2026 1:09 PM

Tags: ai, cyber, data, intelligence, microsoft, open-source, tool

Microsoft has officially released a new open-source tool designed to simplify how IT and security administrators manage data governance. Announced on March 16, 2026, the DLM Diagnostics Model Context Protocol (MCP) Server brings artificial intelligence directly into the troubleshooting process for Microsoft Purview Data Lifecycle Management (DLM). Managing data lifecycles across Microsoft 365 workloads is…
Microsoft Launches AI-Driven Troubleshooting for Purview Data Lifecycle Tools

Mar 17, 2026 1:09 PM

Tags: ai, cyber, data, intelligence, microsoft, open-source, tool

Microsoft has officially released a new open-source tool designed to simplify how IT and security administrators manage data governance. Announced on March 16, 2026, the DLM Diagnostics Model Context Protocol (MCP) Server brings artificial intelligence directly into the troubleshooting process for Microsoft Purview Data Lifecycle Management (DLM). Managing data lifecycles across Microsoft 365 workloads is…
CrowdStrike Extends Agentic AI Alliance with NVIDIA

Mar 16, 2026 10:10 PM

Tags: ai, crowdstrike, detection, intelligence, nvidia, open-source, service

CrowdStrike today revealed it is adding additional artificial intelligence (AI) agents into its managed detection and response (MDR) services using a toolkit provided by NVIDIA. At the same time, CrowdStrike also announced that a Secure-by-Design AI Blueprint built in collaboration with NVIDIA will now be incorporated into NVIDIA OpenShell, an open-source runtime for creating sandboxes..…
CrowdStrike Extends Agentic AI Alliance with NVIDIA

Mar 16, 2026 10:10 PM

Tags: ai, crowdstrike, detection, intelligence, nvidia, open-source, service

CrowdStrike today revealed it is adding additional artificial intelligence (AI) agents into its managed detection and response (MDR) services using a toolkit provided by NVIDIA. At the same time, CrowdStrike also announced that a Secure-by-Design AI Blueprint built in collaboration with NVIDIA will now be incorporated into NVIDIA OpenShell, an open-source runtime for creating sandboxes..…
PostgreSQL Penetration Testing

Mar 16, 2026 2:09 PM

Tags: open-source, penetration-testing

PostgreSQL is one of the most popular open-source relational database systems, powering everything from small web applications to enterprise-scale platforms. Its widespread adoption makes it First seen on hackingarticles.in Jump to article: www.hackingarticles.in/penetration-testing-on-postgresql-5432/
Betterleaks Launches as Open-Source Tool for Scanning Files, Directories, and Git Repositories

Mar 16, 2026 2:09 PM

Tags: control, cyber, open-source, tool

Zach Rice, the original creator of the widely popular secret scanning tool Gitleaks, has officially launched its successor, Betterleaks. Sponsored by Aikido Security, this new open-source project aims to be a faster, smarter, and highly configurable replacement for finding hardcoded secrets in codebases. After losing full administrative control over the original Gitleaks repository, Rice joined…
VulHunt: Open-source vulnerability detection framework

Mar 16, 2026 7:09 AM

Tags: detection, framework, open-source, vulnerability

Binarly has published VulHunt Community Edition, making the core scanning engine from Binarly’s commercial Transparency Platform available to independent researchers and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/16/vulhunt-open-source-vulnerability-detection-framework/
Betterleaks, a new open-source secrets scanner to replace Gitleaks

Mar 15, 2026 4:10 PM

Tags: open-source, tool

A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/betterleaks-a-new-open-source-secrets-scanner-to-replace-gitleaks/
OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration

Mar 14, 2026 7:09 PM

Tags: ai, china, computer, data, flaw, injection, intelligence, network, open-source

China’s National Computer Network Emergency Response Technical Team (CNCERT) has issued a warning about the security stemming from the use of OpenClaw (formerly Clawdbot and Moltbot), an open-source and self-hosted autonomous artificial intelligence (AI) agent.In a post shared on WeChat, CNCERT noted that the platform’s “inherently weak default security configurations,” coupled with its First seen…
Mapping the Unknown: Introducing Pius for Organizational Asset Discovery

Mar 13, 2026 8:10 PM

Tags: attack, open-source, penetration-testing, service

Asset discovery is an essential part of Praetorian’s service delivery process. When we are engaged to carry out continuous external penetration testing, one key action is to build and maintain a thorough target asset inventory that goes beyond any lists or databases provided by the system owner. Pius is our open-source attack surface mapping tool……
DR-DOS rises again rebuilt from scratch, not open source

Mar 12, 2026 11:10 AM

Tags: dos, open-source

Project claims legal clarity and zero legacy code, but offers binaries only First seen on theregister.com Jump to article: www.theregister.com/2026/03/11/drdos_9/
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

Mar 12, 2026 11:10 AM

Tags: advisory, open-source

ENISA’s first Technical Advisory on Secure Package Managers helps developers safely use third-party packages. ENISA has released its first Technical Advisory on Package Managers, focusing on how developers can safely consume third-party packages. The document (March 2026, v1.1) follows public feedback incorporating 15 contributions from stakeholders, experts, and the open-source community. >>This document focuses on…
Salesforce tracks possible ShinyHunters campaign targeting its users

Mar 11, 2026 4:48 PM

Tags: cloud, malicious, open-source, tool

Salesforce warns users of an uptick in malicious activity targeting Experience Cloud customers with misconfigured user settings via an open source tool First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366639851/Salesforce-tracks-possible-ShinyHunters-campaign-targeting-its-users
Cloud-audit: Fast, open-source AWS security scanner

Mar 11, 2026 7:47 AM

Tags: cloud, open-source

Running AWS security audits without a dedicated security team typically means choosing between enterprise platforms with per-check billing and generic open-source scanners … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/11/cloud-audit-open-source-aws-security-scanner/
APT28 hackers deploy customized variant of Covenant open-source tool

Mar 10, 2026 11:46 AM

Tags: espionage, exploit, framework, group, hacker, open-source, russia, threat, tool

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt28-hackers-deploy-customized-variant-of-covenant-open-source-tool/
Gogs Flaw Could Let Attackers Quietly Overwrite Large File Storage Data

Mar 10, 2026 11:46 AM

Tags: attack, cve, cyber, data, exploit, flaw, open-source, software, supply-chain, threat, vulnerability

A critical security vulnerability has been identified in Gogs, a widely used open-source self-hosted Git service. / Tracked as CVE-2026-25921, this flaw allows unauthenticated attackers to silently overwrite Git Large File Storage (LFS) objects across any repository. By exploiting a lack of content verification, threat actors can conduct stealthy software supply-chain attacks, replacing legitimate project…
Cloudflare Pingora Flaws Enable Request Smuggling and Cache Poisoning Attacks

Mar 10, 2026 11:46 AM

Tags: advisory, attack, cve, cyber, data-breach, flaw, Internet, network, open-source, vulnerability

In a recent security advisory, Cloudflare disclosed multiple HTTP request smuggling and cache poisoning vulnerabilities in its open-source Pingora framework. Tracked under the identifiers CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836, these flaws specifically impact standalone Pingora deployments that are exposed directly to the internet as ingress proxies. Cloudflare has explicitly confirmed that its own Content Delivery Network…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Mar 10, 2026 9:48 AM

Tags: access, cloud, exploit, open-source, threat, tool

Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector.The activity, per the company, involves the exploitation of customers’ overly permissive Experience Cloud guest user configurations to obtain access to sensitive…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Meta’s AI Safety Chief Couldn’t Stop Her Own Agent. What Makes You Think You Can Stop Yours?

Mar 9, 2026 8:48 PM

Tags: ai, exploit, github, microsoft, open-source, threat

Two incidents from the last two weeks of February need to be read together, because separately they look like cautionary anecdotes and together they look like a threat doctrine. Incident One: An autonomous bot called hackerbot-claw attacked seven major open-source repositories”, Microsoft, DataDog, the CNCF, and Trivy among them. It exploited a well-documented GitHub Actions…
ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

Mar 9, 2026 8:48 PM

Tags: attack, data, mandiant, open-source, tool

And they abused a Mandiant-developed open source tool in the attacks First seen on theregister.com Jump to article: www.theregister.com/2026/03/09/shinyhunters_claims_more_highprofile_victims/
Chinese Cyber Threat Lurks In Critical Asian Sectors for Years

Mar 9, 2026 4:46 PM

Tags: china, cyber, linux, malware, open-source, threat, tool, windows

An undefined Chinese-speaking actor wields a combo of custom malware, open source tools, and LOTL binaries against Windows and Linux, likely for spying. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/chinese-cyber-threat-critical-asian-sectors
Cyber Espionage Group CL-UNK-1068 Linked to China Targets Asian Infrastructure

Mar 9, 2026 1:47 PM

Tags: china, cyber, espionage, government, group, infrastructure, law, malware, open-source, technology, threat

A highly sophisticated cyber espionage group, designated as CL-UNK-1068, has been actively targeting critical infrastructure across South, Southeast, and East Asia since at least 2020. Originating from China, the threat actors focus on high-value sectors, including aviation, energy, government, law enforcement, technology, and telecommunications. The attackers use a versatile mix of custom malware, open-source utilities,…
1-Click ZITADEL Vulnerability Could Allow Full System Takeover

Mar 9, 2026 10:47 AM

Tags: access, cve, cyber, flaw, identity, login, malicious, open-source, vulnerability

A critical Cross-Site Scripting (XSS) vulnerability has been discovered in ZITADEL, a popular open-source identity and access management platform. Tracked as CVE-2026-29191 with a Critical severity rating, this flaw resides in the platform’s login V2 interface, specifically within the /saml-post endpoint. It allows unauthenticated remote attackers to execute malicious JavaScript directly within a user’s browser. With a…
ExifTool Vulnerability Lets Malicious Images Trigger macOS Code Execution

Mar 9, 2026 8:47 AM

Tags: computer, cyber, data, macOS, malicious, open-source, tool, vulnerability

ExifTool is a ubiquitous open-source solution for reading, writing, and editing image metadata. It’s the go-to tool for photographers and digital archivists, and is widely used in data analytics, digital forensics, and investigative journalism. Can a computer really get infected just by processing an image even on macOS, often (incorrectly) thought to be immune to…
Open-source tool Sage puts a security layer between AI agents and the OS

Mar 9, 2026 7:47 AM

Tags: ai, open-source, tool

Autonomous AI agents running on developer workstations execute shell commands, fetch URLs, and write files with little or no inspection of what they are doing. Open-source … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/09/open-source-tool-sage-security-layer-ai-agents/
Critical ExifTool Vulnerability Allows Malicious Images to Execute Code on macOS

Mar 9, 2026 7:47 AM

Tags: cve, cyber, flaw, kaspersky, macOS, malicious, malware, open-source, vulnerability

Many users believe macOS is inherently resistant to malware, but a newly discovered vulnerability proves otherwise. Kaspersky’s Global Research and Analysis Team (GReAT) recently uncovered a critical flaw, tracked as CVE-2026-3102, within ExifTool. ExifTool is a widely popular open-source application and library for extracting and editing file metadata. If a macOS user processes a specially…
WiFi Signals Can Track Human Activity Through Walls by Mapping Body Keypoints

Mar 9, 2026 6:48 AM

Tags: ai, cyber, github, open-source, privacy, tool, wifi

In late February 2026, an open-source project named RuView (formerly WiFi DensePose) surged to the top of GitHub trending lists. This edge AI system proves that everyday WiFi signals can track human movement, estimate body poses, and monitor vital signs through walls, all without using a single camera. While marketed as a privacy-friendly tool for…