Aggregator

Critical Vulnerability in MCP Server Platform Exposes 3,000+ Servers and Thousands of API Keys

Cyber Security News
3 months 3 weeks ago

A critical vulnerability in Smithery.ai, a popular registry for Model Context Protocol (MCP) servers. This issue could have allowed attackers to steal from over 3,000 AI servers and take API keys from thousands of users across many services. MCP powers AI apps by linking them to external tools and data, like local filesystems or remote […]

The post Critical Vulnerability in MCP Server Platform Exposes 3,000+ Servers and Thousands of API Keys appeared first on Cyber Security News.

Guru Baran

Canada Fines Cybercrime Friendly Cryptomus $176M

Krebs on Security
3 months 3 weeks ago
Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti money-laundering laws come ten months after KrebsOnSecurity noted that Cryptomus's Vancouver street address was home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges — none of which were physically located there.
BrianKrebs

Canada Fines Cybercrime Friendly Cryptomus $176M

Ransomware – Krebs on Security
3 months 3 weeks ago
Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti money-laundering laws come ten months after KrebsOnSecurity noted that Cryptomus's Vancouver street address was home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges — none of which were physically located there.
BrianKrebs

Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign

The Hackers News
3 months 3 weeks ago
The Iranian nation-state group known as MuddyWater has been attributed to a new campaign that has leveraged a compromised email account to distribute a backdoor called Phoenix to various organizations across the Middle East and North Africa (MENA) region, including over 100 government entities. The end goal of the campaign is to infiltrate high-value targets and facilitate intelligence gathering
The Hacker News

CVE-2025-62168

CVE Trends
3 months 3 weeks ago
Currently trending CVE - Hype Score: 5 - Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted ...

Critical Argument Injection Vulnerability in Popular AI Agents Let Attackers Execute Remote Code

Cyber Security News
3 months 3 weeks ago

A critical argument injection flaw in three unnamed popular AI agent platforms enables attackers to bypass human approval safeguards and achieve remote code execution (RCE) through seemingly innocuous prompts. According to Trail of Bits, these vulnerabilities exploit pre-approved system commands designed for efficiency in tasks like file searches and code analysis, highlighting a widespread design […]

The post Critical Argument Injection Vulnerability in Popular AI Agents Let Attackers Execute Remote Code appeared first on Cyber Security News.

Guru Baran

SOCs Have a Quishing Problem: Here’s How to Solve It 

Cyber Security News
3 months 3 weeks ago

QR codes used to be harmless, now they’re one of the sneakiest ways attackers slip past defenses. Quishing, or QR code phishing, hides malicious links inside innocent-looking images that filters can’t read.  One scan, and the victim lands on a fake login page designed to steal credentials or trigger a download; often from a mobile device completely outside your SOC’s visibility.  […]

The post SOCs Have a Quishing Problem: Here’s How to Solve It  appeared first on Cyber Security News.

Balaji N

Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files

The Hackers News
3 months 3 weeks ago
Cybersecurity researchers have disclosed details of a coordinated spear-phishing campaign dubbed PhantomCaptcha targeting organizations associated with Ukraine's war relief efforts to deliver a remote access trojan that uses a WebSocket for command-and-control (C2). The activity, which took place on October 8, 2025, targeted individual members of the International Red Cross, Norwegian Refugee
The Hacker News

CVE-2025-52566 | ggml-org llama.cpp src/llama-vocab.cpp llama_vocab::tokenize memory corruption (GHSA-7rxv-5jhh-j6xx / EUVD-2025-19074)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in ggml-org llama.cpp and classified as critical. The impacted element is the function llama_vocab::tokenize of the file src/llama-vocab.cpp. The manipulation results in memory corruption. This vulnerability is identified as CVE-2025-52566. The attack is only possible with local access. There is not any exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

Managed ad