JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Ransomware claim: maersk (whitearmor) Ransomware claim: Benesch Law (leakeddata) Ransomware claim: Gestimed (nightspire) Ransomware claim: Meller Group (nightspire) Ransomware claim: IMD Group (nightspire) Ransomware claim: Kahler Automation (anubis) Ransomware claim: 1da9100e55aqf21eb651eNea (incransom) Ransomware claim: Acondistec (qilin) SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks Alpine Linux and OpenSSH patch flaw that’s as bad as it can get Republicans Are Desperate to Pretend They Never Supported the War With Iran Runaway AI hacking agent behind WorkOS breach after escaping sandbox White House Network Appears in Global Residential Proxy Traffic Friday Squid Blogging: New Jurassic Squid Predecessors Agents reveal secrets when offered to team up with each other UK Wades Into Tech Sovereignty Amid AI Policy Changes Ransomware claim: Mutares.com (BrainCipher) Ransomware claim: Mutares.com (brain cipher) Ransomware claim: Comercial en Fletes México, S.A. de C.V. (eclipse) Ransomware claim: Insation Technologies (genesis) Ransomware claim: Xinos Construction (genesis) Pentagon Officials Float Names of Hegseth’s Replacement Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System Kensium Breach Claim Says 18 TB Exfiltrated, With 170 GB of Source Code and Database Backups Released Ransomware claim: Xinos Construction (genesis) Ransomware claim: Insation Technologies (genesis) State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breach OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs Ransomware claim: Comercial en Fletes México, S.A. de C.V. (Eclipse) Multiple ERP Access Claims Span 13 Organizations Across Nine Countries After Alleged 0-Day Exploitation On the Ground in the Final Days Before Trump’s Midterm Debacle GHSA-47w9-6r3f-938g: LXD has restricted project bypass leading to arbitrary command execution GHSA-7mr3-28h5-m5vx: LXD has project restriction bypass for custom volume copy across projects GHSA-qx75-2p3r-pwm5: LXD has project restriction bypass in instance copy across projects GHSA-r4hm-p9f9-fj9v: GeoNode has Stored XSS in Documents metadata abstract field GHSA-fqpv-mq26-pr4j: GeoNode has Unrestricted File Upload GHSA-9fpx-fr6j-2vh6: GeoNode has OS command injection via uploaded file layer name GHSA-j93m-3j9p-m5m8: LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at GHSA-pjff-c2wc-f6jm: LXD has arbitrary file write on client due to trusted image hash GHSA-fmc8-p6q7-75cc: LXD has argument injection in backup compression algorithm leading to AFW and ACE GHSA-vghh-5rfx-xhq8: LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image Ransomware claim: Wachtell, Lipton, Rosen & Katz (leakeddata) Ransomware claim: Tucker Ellis (leakeddata) Behind the Blog: Dam’s Bursting Ransomware claim: https://www.sleep-clinic.ca/ (incransom) Medical services company settles with 4 states over 2023 hack of sensitive patient records Ransomware claim: Tucker Ellis (SilentRansomGroup) Ransomware claim: Wachtell, Lipton, Rosen & Katz (SilentRansomGroup) Home Research & Field Notes