JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Attackers Crash Claude’s ‘Office Party’ Flaw to Run Malicious Code on Linux Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data Russian cloud firm Beget rebuilds from scratch after data wiper attack Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns PwC’s CISO on AI, Robots & What’s Next for Security Ransomware claim: Forus Deporte y Ocio S.L (black x) Ransomware claim: Texas HHSC (byod) Ransomware claim: M.C.S. Steel Public Company Limited (rhysida) Critical Infrastructure Under Siege, From Freezers to Wider OT Ransomware claim: h***de (cloak) Ransomware claim: carrollins.com (everstake) Ransomware claim: Vanderbilt EDU (byod) Ransomware claim: HHSC Texas (byod) Binance denies data breach after alleged ShinyHunters claims Bad news for kinky Brits Hackers exploit SSHole OpenSSH flaw to breach Linux systems NIST: Solo Shouldn’t Mean Less Secure AU: Important update from Epichealth – cyber incident Ukraine arrests four in $5 million crypto scam targeting Germans The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI. Microsoft’s Azure Linux gets 470-plus security fixes in one almighty patching session ARTEX goes from pentesting tool to attacker staple in three months Hackers abuse refrigeration controllers to send spam and route proxy traffic QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices FBI agent stole $2.5 million in crypto from hackers under investigation Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia Who Gives A Crap? Hackers, apparently, after toilet paper maker’s customer data exposed Alleged AI-aided cyberattack exploits assistant interface to breach German web host Revolve Puts Data Breach Victim Count at 1.5 Million Weill Cornell patient data entered into AI tools without authorization Ex-Belgrade Police Chief Denies Charges in ‘Body in a Barrel’ Case Small Business Administration: Opportunities Exist to Improve Improper Payment Estimation and Recovery Processes Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach Outlook.com bounces legit emails as Microsoft’s authentication crackdown goes sideways US bans MEXC crypto exchange over sanctions evasion, cybercrime links ⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More PyPI makes release attestations easier to find with new security tab Ransomware claim: Johnson Development Corp. (aurora) Pro-Russian hackers target European officials, offer rewards for personal information Plex2Shell Exploited Against QNAP NAS Users 13.3 million people’s medical data exposed; companies pay $300,000 ChatGPT’s Desktop App Lets Its Coding Agent Use Your Forwarded SSH Keys Department of Agriculture: Little Transparency on Whether Key Issues Were Analyzed Before Reorganization Decision Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers Ransomware claim: Company #211 (n0n) Ransomware claim: Company #210 (n0n) Home Research & Field Notes