Aggregator

APT28 conducts long-term espionage on Ukrainian forces using custom malware

Security Affairs
2 weeks 2 days ago
APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel. According to ESET, the campaign began in April 2024 and relies on […]
Pierluigi Paganini

Fortinet enhances SecOps with cloud SOC, AI automation, and managed services

Help Net Security
2 weeks 2 days ago

Fortinet has announced major innovations across the Fortinet Security Operations (SecOps) Platform. The updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through FortiEndpoint. “As attackers weaponize AI to accelerate reconnaissance, exploit development, and social engineering, security operations must function with the same speed and coordination. Fortinet is advancing a unified, AI-powered security operations platform that provides a scalable operating architecture across our … More →

The post Fortinet enhances SecOps with cloud SOC, AI automation, and managed services appeared first on Help Net Security.

Industry News

创业公司想发射数千颗反射阳光的卫星

Solidot
2 weeks 2 days ago
创业公司 Reflect Orbital 计划发射数千颗安装有反射镜的卫星，在地球上的晚上通过反射阳光提供照明，比如让太阳能发电站在晚上继续发电，或者为救援人员提供照明和照亮城市街道。Reflect Orbital 的首颗原型卫星有冰箱大小，轨道高度大约 644 公里，将会展开一个直径 18 米的镜子，卫星会照亮一块直径约 4.8 公里的圆形区域。该公司已经向 FCC 递交了发射申请。如果 FCC 批准，卫星最早将在夏天发射送人轨道。该公司已筹集到 2800 万美元，计划未来一年再发射两颗原型卫星，到 2028 年底前发射 1000 颗比原型更大的卫星，2030 年前发射 5000 颗。它计划的最大的卫星发射镜直径约 55 米，反射的光量相当于 100 个满月。该公司的目标是在 2035 年前部署总共 5 万颗卫星的完整星座。如果客户签订一年长约，使用时长达到或超过逾千小时，该公司将按每小时约 5000 美元的价格收取单面镜子的照明费用。

Mend.io eliminates AI prompt weaknesses before production

Help Net Security
2 weeks 2 days ago

Mend.io has launched System Prompt Hardening within Mend AI to detect, score, and automatically remediate weaknesses in AI system prompts. Hidden instructions in system prompts have emerged as a growing security concern that traditional AppSec tools do not fully address. System Prompt Hardening provides instant visibility into these behind-the-scenes instructions, identifies weaknesses, and automatically strengthens prompt logic to reduce risk before applications reach production. Powered by Mend.io’s proprietary AI Weakness Enumeration (AIWE), a framework modeled … More →

The post Mend.io eliminates AI prompt weaknesses before production appeared first on Help Net Security.

Industry News

CVE-2026-2593 | Greenshift Plugin up to 12.8.5 on WordPress Block Attribute _gspb_post_css cross site scripting (EUVD-2026-9887)

Vuldb Updates
2 weeks 2 days ago
A vulnerability was found in Greenshift Plugin up to 12.8.5 on WordPress and classified as problematic. This affects the function _gspb_post_css of the component Block Attribute Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-2593. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-29613 | OpenClaw up to 2026.2.11 BlueBubbles missing authentication (GHSA-xc7w-v5x6-cc87)

Vuldb Updates
2 weeks 2 days ago
A vulnerability, which was classified as critical, was found in OpenClaw up to 2026.2.11. Affected by this issue is some unknown functionality of the component BlueBubbles. Executing a manipulation can lead to missing authentication. This vulnerability is tracked as CVE-2026-29613. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2026-29609 | OpenClaw up to 2026.2.13 fetchWithGuard allocation of resources (GHSA-j27p-hq53-9wgc)

Vuldb Updates
2 weeks 2 days ago
A vulnerability was found in OpenClaw up to 2026.2.13 and classified as problematic. This vulnerability affects the function fetchWithGuard. The manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2026-29609. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-29611 | OpenClaw up to 2026.2.13 /etc/passwd sendBlueBubblesMedia mediaPath file inclusion (GHSA-rwj8-p9vq-25gv)

Vuldb Updates
2 weeks 2 days ago
A vulnerability was found in OpenClaw up to 2026.2.13 and classified as problematic. This impacts the function sendBlueBubblesMedia of the file /etc/passwd. Executing a manipulation of the argument mediaPath can lead to file inclusion. This vulnerability is tracked as CVE-2026-29611. The attack is restricted to local execution. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

Managed ad