For the latest discoveries in cyber research for the week of 19th January, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Spanish energy company Endesa has disclosed a data breach after unauthorized access to a commercial platform used to manage customer information. Media report attackers listed over 1 terabyte of data, including IBANs,…
A pilot scheme designed to identify and nip potential health problems in the bud has been launched by the Isle of Man’s public health directorate. The so-called fit checks have begun at Ramsey Group Practice in the north of the island, as part of a project that could also help to shape future services. They…
PA Media Cold temperatures cause 16-year-old Amber to break out in red, itchy hives “I just want to be able to do normal things and have a normal life and not have to worry.” A 16-year-old girl from north Wales says she is “always scared” of having an allergic reaction after being diagnosed with a…
Against that backdrop, Europe’s reliance on American-made AI begins to look more and more like a liability. In a worst case scenario, though experts consider the possibility remote, the US could choose to withhold access to AI services and crucial digital infrastructure. More plausibly, the Trump administration could use Europe’s dependence as leverage as the…
I’ve seen many API requests for different LLMs in the honeypot logs. Like this one: The prompt is always the same: “How many states are there in the United States?”. This is recon to find open LLMs. Not necessarily to exploit them, but to use them. Coincidentally, something similar has been reported in the news: “Hackers…
# Exploit Title: RPi-Jukebox-RFID 2.8.0 – Remote Code Execution # Date: 2025-09-25 # Exploit Author: Beatriz Fresno Naumova # Vendor Homepage: https://github.com/MiczFlor/RPi-Jukebox-RFID # Software Link: https://github.com/MiczFlor/RPi-Jukebox-RFID/releases/tag/v2.8.0 # Version: 2.8.0 # Tested on: Raspberry Pi OS with RPi-Jukebox-RFID v2.8.0 # CVE: CVE-2025-10327 # # Description: # This PoC demonstrates an OS command injection vulnerability in…
# Exploit Title: Siklu EtherHaul Series – Unauthenticated Arbitrary File Upload # Shodan Dork: “EH-8010” or “EH-1200″ # Date: 2025-08-02 # Exploit Author: semaja2 – Andrew James # Vendor Homepage: https://www.ceragon.com/products/siklu-by-ceragon # Software Link: ftp://ftp.bubakov.net/siklu/ # Version: EH-8010 and EH-1200 Firmware 7.4.0 – 10.7.3 # Tested on: Linux # CVE: CVE-2025-57176 # Blog: https://semaja2.net/2025/08/03/siklu-eh-unauth-arbitrary-file-upload/ …
# Exploit Title:Siklu EtherHaul Series EH-8010 – Remote Command Execution # Shodan Dork: “EH-8010” or “EH-1200″ # Date: 2025-08-02 # Exploit Author: semaja2 – Andrew James # Vendor Homepage: https://www.ceragon.com/products/siklu-by-ceragon # Software Link: ftp://ftp.bubakov.net/siklu/ # Version: EH-8010 and EH-1200 Firmware 7.4.0 – 10.7.3 # Tested on: Linux # CVE: CVE-2025-57174 # Blog: https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce/ …
Wireshark release 4.6.3 fixes 4 vulnerabilities and 9 bugs. Source link
Leaders at Mira Murati’s Thinking Machines Lab confronted the startup’s cofounder and former CTO, Barret Zoph, over an alleged relationship with another employee last summer, WIRED has learned. That relationship was likely the alleged “misconduct” that has been mentioned in prior reporting, including by WIRED. To protect the privacy of the individuals involved, WIRED is…
