JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html With the new shift in the U.S. Congress, time is running out on bills targeting drug patents GHSA-mjrq-cffv-q4qc: Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file GHSA-h7wh-q2qr-458c: rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent calls GHSA-jv6m-48w5-5rpr: envd: Host file disclosure through requirements path traversal and TOCTOU GHSA-cpgf-5mjf-73p7: rails-html-sanitizer: Possible regular expression denial of service with certain configurations The Microsoft Outage Is a Warning for the World New York City votes to ban surveillance pricing GHSA-mf5v-w3w3-f6cg: OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing GHSA-6655-6qjp-jx7x: Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER GHSA-7g44-g9rc-x53w: Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack German parliament passes law giving spy agencies hacking, sabotage powers Ransomware claim: Koehler Financial Group Inc (pixelleaks) Ransomware claim: Missouri Welding Institute (missouriweldinginstitute.com) (pixelleaks) Ransomware claim: Orion Communications Inc (pixelleaks) Ransomware claim: Products Group International Inc (pixelleaks) Ransomware claim: Hofstetter Business Technologies (pixelleaks) Ransomware claim: Boston Institute of Finance (CRC designation, ex-InFRE, Colibri Group) (pixelleaks) Ransomware claim: International Utility Specialists Inc. (pixelleaks) Ransomware claim: King International Investment Ltd (HKEX: 00928, Lianhe Medical subsidiary) (pixelleaks) Ransomware claim: BEAM Society (iBeam platform, www.ibeam.hk) (pixelleaks) Ransomware claim: SPI Corp / SPI Energy group (spicorp-invest.com) (pixelleaks) Microsoft Outlook Outage: What You Need to Know Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper ChatGPT Wallet lets agents pay without seeing your card number DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018 New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach Five Questions About the Future of Global Anticorruption Efforts in the Trump Era TSMC confirms employee data breach tied to cloud service provider How one AI agent exposed five critical enterprise security gaps Fake GTA 6 download goes after Steam logins and crypto wallet data Hospitals, airlines and governments hit by Microsoft outage as employee risk warnings mount Crackdown on UK medical record snooping after staff reported sneaking 300+ times this year Microsoft Outage 2026: What Happened and What the Law Says Over 144,000 Norwegian and Widerøe passengers affected by data breach Gootloader Malware Disrupted After Infecting 25,000 Computers FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Ransomware attack on Belarusian cloud firm disrupts businesses for days FBI Disrupts North Korean FaceStealer Scheme Behind $400M Crypto Theft Google pushes second Chrome update this week Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases Microsoft Struggles to Restore Email and Other Services in a Global Outage Hackers’ Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says Quantum Systems drones back in the air after malware scare XaocMail ClickFix Campaign Drops Phantom53 and HavoX Across Latin America, Asia, and Europe FaceStealer: FBI Disrupts Fake Video Call Crypto Scam 4EverAble2Shell At a Glance Home Research & Field Notes