Back to Articles
Security Affairs newsletter Round 575 by Pierluigi Paganini - INTERNATIONAL EDITION
Cybersecurity

Security Affairs newsletter Round 575 by Pierluigi Paganini - INTERNATIONAL EDITION

Ali NematiAli NematiMay 3
1m & 2 s read307 views0 listens

Here are the key points from the Security Affairs newsletter:

  1. Major Linux vulnerability: A critical flaw affecting all major Linux distributions was discovered that could allow root access with just 732 bytes of code.

  2. GitHub RCE vulnerability (CVE-2026-3854): Researchers uncovered a Remote Code Execution vulnerability in GitHub.com and GitHub Enterprise Server.

  3. AI fueling cybercrime: The time to exploit vulnerabilities is rapidly shrinking due to the use of artificial intelligence by cybercriminals.

  4. Malware targeting Minecraft players: A new malware called LofyStealer is specifically targeting users of the popular game Minecraft.

  5. Firefox privacy vulnerability: Researchers found a way to link all private Tor identities in Firefox, compromising user anonymity.

  6. GitHub supply chain attack: The Lightning Python package was compromised, infecting 8.3 million downloads in a Shai-Hulud supply chain attack.

  7. Tennessee bans cryptocurrency ATMs: Due to concerns about scams and fraud, Tennessee has banned cryptocurrency ATMs statewide.

  8. Meta potentially violating Digital Services Act: The EU Commission is investigating whether Meta (Facebook) violated the Digital Services Act by allowing users under 13 on Instagram and Facebook.

  9. NC

Read the full article at Security Affairs

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

Views307
Tags
BlockchainCybersecurityOpen Source
Ali Nemati
Ali NematiBlogUI.author_articles
BlogUI.view_profile

You Might Like

Famous Chollima Hackers Target PHP Developers Using Compromised Packagist Package
CybersecurityJun 131 sec read

Famous Chollima Hackers Target PHP Developers Using Compromised Packagist Package

A sophisticated attack campaign is targeting PHP developers by embedding malware within a legitimate package on Packagist, a primary repository for PHP dependencies. The malware is cleverly hidden in a configuration file, making it difficult to detec...

Ali NematiAli Nemati
Read More
ExDoS: Expert-Guided Dual-Focus Cross-Modal Distillation for Smart Contract Vulnerability Detection
CybersecurityApr 824 sec read

ExDoS: Expert-Guided Dual-Focus Cross-Modal Distillation for Smart Contract Vulnerability Detection

Researchers have developed ExDoS, a new technique for detecting vulnerabilities in smart contracts by transferring semantic knowledge from source code to bytecode, addressing the challenge of analyzing closed-source contracts. This approach uses dual...

alinemati1983-6987alinemati1983-6987
Read More
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
CybersecurityFeb 2330 sec read

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

Cybersecurity researchers have uncovered a "Shai-Hulud-like" supply chain worm campaign named SANDWORM_MODE that uses at least 19 malicious npm packages to steal credentials and cryptocurrency keys. This attack highlights the ongoing risks in softwar...

Ali NematiAli Nemati
Read More