Collecting Cyber-News from over 60 sources

Tag: open-source

LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

Apr 24, 2026 10:38 AM

Tags: access, cve, exploit, flaw, LLM, open-source, vulnerability

A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild less than 13 hours after its public disclosure.The vulnerability, tracked as CVE-2026-33626 (CVSS score: 7.5), relates to a Server-Side Request Forgery (SSRF) vulnerability that could be exploited to access sensitive data.”A server-side…
Hackers Exploit Ollama Model Uploads to Leak Server Data

Apr 24, 2026 9:39 AM

Tags: ai, cve, cyber, cybersecurity, data, exploit, flaw, hacker, leak, open-source, vulnerability

Cybersecurity researchers have uncovered a severe, unpatched vulnerability in Ollama, a popular open-source platform used for running large language models locally. Tracked as CVE-2026-5757, this critical flaw exists in Ollama’s model quantization engine. If exploited, it allows an unauthenticated attacker to steal sensitive server data by simply uploading a maliciously crafted AI model file. How…
Hackers Exploit Ollama Model Uploads to Leak Server Data

Apr 24, 2026 9:39 AM

Tags: ai, cve, cyber, cybersecurity, data, exploit, flaw, hacker, leak, open-source, vulnerability

Cybersecurity researchers have uncovered a severe, unpatched vulnerability in Ollama, a popular open-source platform used for running large language models locally. Tracked as CVE-2026-5757, this critical flaw exists in Ollama’s model quantization engine. If exploited, it allows an unauthenticated attacker to steal sensitive server data by simply uploading a maliciously crafted AI model file. How…
Cloudsmith Raises $72M for Software Supply-Chain Security

Apr 24, 2026 5:39 AM

Tags: ai, ciso, open-source, risk, risk-analysis, software, supply-chain, threat

Recent Package Compromises Pushed Software Component Trust to the Security Agenda. Cloudsmith raised a $72 million Series C led by TCV to expand policy enforcement, auditability and real-time package risk analysis as CISOs focus more closely on software supply-chain threats tied to open-source dependencies, AI-assisted development and compromised artifacts. First seen on govinfosecurity.com Jump to…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
Five steps to become Mythos ready

Apr 23, 2026 9:39 PM

Tags: access, ai, attack, automation, breach, business, cloud, compliance, control, cvss, cyber, cybersecurity, data, defense, detection, exploit, flaw, framework, identity, incident response, infrastructure, LLM, mitre, network, office, open-source, openai, risk, software, threat, tool, training, update, vulnerability, zero-day

AI is uncovering vulnerabilities at a scale that will overwhelm legacy defenses. Here is how to build a security organization that is Mythos ready. Key takeaways While frontier AI models like Claude Mythos boost cyber defenses, they also empower attackers to discover and weaponize vulnerabilities at unprecedented machine speed. To avoid getting buried by an…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Malus.sh: KI-Tool befreit Open-Source-Programme von Lizenzen

Apr 23, 2026 3:39 PM

Tags: ai, open-source, software, tool

Das KI-Tool Malus erstellt Clean-Room-Klone von Open-Source-Software und beruft sich auf ein US-Urheberrechtsgesetz aus dem Jahr 1879. First seen on golem.de Jump to article: www.golem.de/news/malus-sh-ki-tool-befreit-open-source-programme-von-lizenzen-2604-207922.html
Experte für Threat-Management Filigran startet in Deutschland

Apr 23, 2026 2:39 PM

Tags: germany, intelligence, open-source, threat

Filigran, das europäische Unternehmen für Threat-Management, bringt seine Open-Source-basierten Lösungen für Bedrohungsinformationen, -management und die Überprüfung von Sicherheitslücken auf den DACH-Markt. Mit dem neu gegründeten deutschen Team erhalten Unternehmen und Behörden in der Region erstmals lokale Ansprechpartner für eine Technologie, die weltweit bereits von mehr als 6.000 Organisationen eingesetzt wird. Anders als klassische Threat-Intelligence-Anbieter, die…
Filigran kommt nach Deutschland und bringt frischen Schwung ins Threat Management

Apr 23, 2026 12:39 PM

Tags: ai, germany, open-source, threat

Filigran bietet einen Open Source basierten, KI-gestützten und auf Bedrohungsdaten gestützten Ansatz für das Continuous Threat Exposure Management (CTEM). First seen on infopoint-security.de Jump to article: www.infopoint-security.de/filigran-kommt-nach-deutschland-und-bringt-frischen-schwung-ins-threat-management/a44735/
Attackers Exploit LMDeploy Flaw in the Wild Within 12 Hours of Advisory

Apr 23, 2026 11:39 AM

Tags: advisory, attack, cyber, exploit, flaw, github, open-source, vulnerability

A critical Server-Side Request Forgery (SSRF) vulnerability in LMDeploy’s vision-language module was exploited in active attacks just 12 hours and 31 minutes after its public disclosure, with no proof-of-concept code required. On April 21, 2026, GitHub published security advisory GHSA-6w67-hwm5-92mq, later assigned CVE-2026-33626, a high-severity SSRF flaw (CVSS 7.5) in LMDeploy, an open-source toolkit developed by Shanghai…
Curl-Entwickler über KI: Open-Source-Projekte versinken im High-Quality-Chaos

Apr 23, 2026 11:39 AM

Tags: ai, open-source

Curl-Entwickler Stenberg äußert sich erneut zu KI-generierten Bug-Reports. Von KI-Schrott ist nun keine Rede mehr. Doch es droht eine gefährliche Zeit. First seen on golem.de Jump to article: www.golem.de/news/curl-entwickler-ueber-ki-open-source-projekte-versinken-im-high-quality-chaos-2604-207901.html
Scenario: Open-source framework for automated AI app red-teaming

Apr 23, 2026 7:39 AM

Tags: ai, business, data, framework, open-source, RedTeam, service

Enterprises running customer service bots, data analytics agents, and other AI-driven applications in production handle sensitive records and connect to core business systems … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/23/scenario-open-source-framework-for-automated-ai-app-red-teaming/
CNAPP ein Kaufratgeber

Apr 23, 2026 6:39 AM

Tags: access, ai, application-security, attack, authentication, cloud, container, detection, edr, encryption, framework, group, ibm, infrastructure, intelligence, kubernetes, linux, ml, monitoring, network, open-source, risk-management, saas, soar, software, supply-chain, threat, tool, vmware

Cloud Security bleibt ein diffiziles Thema und die Tools, mit denen sie sich gewährleisten lässt, werden zunehmend komplexer und schwieriger zu durchschauen auch dank der ungebrochenen Liebe der Branche zu Akronymen. Mit CNAPP kommt nun ein weiteres hinzu. Die Abkürzung steht für Cloud-Native Application Protection Platform und kombiniert die Funktionen von vier separaten Cloud-Security-Werkzeugen: Cloud…
Tropic Trooper Pivots to AdaptixC2 and Custom Beacon Listener

Apr 23, 2026 5:39 AM

Tags: access, api, attack, backdoor, china, cloud, control, data, detection, github, infection, intelligence, korea, login, malicious, malware, military, monitoring, network, open-source, service, tactics, threat, tool, windows

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample uncovered a campaign leveraging a multi-stage attack chain where a trojanized SumatraPDF reader deploys an AdaptixC2 Beacon agent, ultimately leading to the download and abuse of Visual Studio (VS) Code tunnels for…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Riddled with flaws, serialEthernet converters endanger critical infrastructure

Apr 23, 2026 5:39 AM

Tags: access, authentication, control, credentials, data, data-breach, exploit, firmware, flaw, infrastructure, malicious, network, open-source, password, rce, remote-code-execution, risk, service, threat, update, vulnerability

New RCE and other vulnerabilities: Aside from all the known vulnerabilities from open-source components, the Forescout researchers also performed manual security analysis and identified previously unknown flaws in the firmware of three specific devices from two vendors: Lantronix EDS3000PS Series, Lantronix EDS5000 Series, and Silex SD330-AC.The web-based management interface of the Lantronix EDS5000 had five…
Malicious pgserve, automagik developer tools found in npm registry

Apr 23, 2026 5:39 AM

Tags: access, attack, breach, cloud, control, corporate, credentials, crypto, data, firewall, github, infrastructure, least-privilege, malicious, malware, network, open-source, password, radius, risk, service, software, tactics, theft, threat, tool, worm

Advice to victimized developers: Developers who have downloaded the malicious versions of pgserver and automagik need to act fast, says Tanya Janca, head of Canadian secure coding consultancy SheHacksPurple.”Rotate every credential you can think of, right now, before you do anything else,” she said. “Then harden your CI/CD network egress controls so your build runners…
Supply Chain Attacks Are Getting Worse”, How to Shrink Your Exposure

Apr 22, 2026 10:39 PM

Tags: attack, exploit, kubernetes, malicious, open-source, supply-chain, vulnerability

<div cla In March 2026, Trivy, one of the most widely used open-source vulnerability scanners in the Kubernetes ecosystem, was weaponized against the very organizations that relied on it for security. Attackers compromised the Aqua Security repository, force-pushed malicious binaries, and poisoned 75 of 76 version tags in the process. Any pipeline that pulled trivy:latest…
DDoS wave continues as Mastodon hit after Bluesky incident

Apr 22, 2026 9:39 PM

Tags: attack, ddos, open-source, software

Mastodon suffered a major DDoS attack shortly after a similar incident hit Bluesky. The outage was significant but resolved within a few hours. Mastodon was hit by a major DDoS attack just days after a similar disruption affected Bluesky. Mastodon is a free and open-source software platform for decentralized social networking with microblogging features similar…
109 Fake GitHub Repos Spread SmartLoader, StealC Malware

Apr 22, 2026 3:39 PM

Tags: blockchain, cyber, detection, github, infrastructure, malicious, malware, open-source

A coordinated malware operation is abusing fake GitHub repositories to distribute a LuaJIT-based loader, SmartLoader, and a follow-on StealC infostealer, with at least 109 malicious repos active across 103 accounts. The campaign blends cloned open source code, obfuscated Lua stages, and blockchain-backed C2 resolution to evade detection and keep infrastructure agile. Instead of relying on…
PentAGI: Open-source autonomous AI penetration testing system

Apr 22, 2026 7:39 AM

Tags: ai, open-source, penetration-testing, tool

Penetration testers have long relied on collections of specialized tools, manual coordination, and documented runbooks to work through a target assessment. PentAGI, an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/22/pentagi-autonomous-ai-penetration-testing/
Apache Syncope RCE Vulnerability Detailed After Public Exploit Code Release

Apr 21, 2026 1:39 PM

Tags: apache, cve, cvss, cyber, exploit, flaw, government, identity, open-source, rce, remote-code-execution, vulnerability

Security researchers have released full technical details and a working proof-of-concept (PoC) exploit for CVE-2025-57738, a high-severity remote code execution (RCE) vulnerability in Apache Syncope, a widely deployed open-source identity management platform used across enterprise and government environments. Tracked as CVE-2025-57738 with a CVSS score of 7.2 (HIGH), the flaw exists in how Apache Syncope…
Bluesky hit by 24-hour DDoS attack as pro-Iran group claims responsibility

Apr 21, 2026 10:39 AM

Tags: attack, ddos, group, hacker, iran, open-source, service

Bluesky suffered a 24-hour DDoS attack that caused outages. A pro-Iran hacker group claimed responsibility for the disruption. Bluesky experienced a sophisticated DDoS attack that disrupted its services for about 24 hours, starting on April 15. Bluesky is a decentralized, open-source microblogging social media platform similar to X (formerly Twitter). It allows users to post…
Bluesky hit by 24-hour DDoS attack as pro-Iran group claims responsibility

Apr 21, 2026 10:39 AM

Tags: attack, ddos, group, hacker, iran, open-source, service

Bluesky suffered a 24-hour DDoS attack that caused outages. A pro-Iran hacker group claimed responsibility for the disruption. Bluesky experienced a sophisticated DDoS attack that disrupted its services for about 24 hours, starting on April 15. Bluesky is a decentralized, open-source microblogging social media platform similar to X (formerly Twitter). It allows users to post…
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

Apr 20, 2026 9:39 PM

Tags: cve, cvss, exploit, injection, malicious, open-source, rce, remote-code-execution, vulnerability

A critical security vulnerability has been disclosed in SGLang that, if successfully exploited, could result in remote code execution on susceptible systems.The vulnerability, tracked as CVE-2026-5760, carries a CVSS score of 9.8 out of 10.0. It has been described as a case of command injection leading to the execution of arbitrary code.SGLang is a high-performance,…
SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

Apr 20, 2026 8:39 AM

Tags: attack, framework, infrastructure, open-source, tool

Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engineering and security teams can see what an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/20/smokedmeat-ci-cd-pipeline-attacks/
QEMU Hijacked as Stealth Backdoor for Credential Theft, Ransomware

Apr 20, 2026 8:39 AM

Tags: backdoor, credentials, cyber, detection, open-source, ransomware, theft, threat

Attackers are increasingly abusing QEMU virtual machines to hide credential theft and ransomware staging inside “invisible” virtual environments, making detection and forensics significantly harder for defenders. QEMU is a legitimate open-source emulator and virtualizer that allows running full operating systems as virtual machines on a host. Threat actors are weaponizing this capability by running their…