#weeklyreport — Public Fediverse posts

State of (in)security - Week 20, 2026

Between May 11–18, 2026, there were 18 vulnerability advisories and 16 cybersecurity incidents affecting roughly 839,000 individuals. Ransomware/malware driving most breaches and the OpenLoop Health breach (716,000 individuals) is the largest breach. Major issues include actively exploited zero-days (Cisco SD-WAN, Microsoft Exchange OWA) and critical patches from Adobe, Apple, Microsoft, SAP, and Fortinet.

**If you installed any @tanstack/* packages on May 11, 2026, disable the dead-man's switch first (systemctl --user stop gh-token-monitor.service on Linux or unload the com.user.gh-token-monitor.plist LaunchAgent on macOS) and remove persistence hooks from .claude/ and .vscode/ directories before rotating any credentials. Revoking tokens first will trigger destruction of your home directory. Only after persistence is disabled should you rotate all secrets (GitHub, AWS, npm, SSH, Vault), block *.getsession.org at DNS, and pin GitHub Actions OIDC publishers to specific branches.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-20-2026-6-x-n-5-c/gD2P6Ple2L

📋 Lab Report #20260517 is LIVE!

Our lab tested 20 trending products this week. Top performer: 0.01 Micron 3-Stage Outdoor Water Purifier Pump Portable Emergency Filter for Camping Hi

🔗 https://thefindlab.org/lab-report-20260517-top-20-tested-finds-this-week/

#TheFindLab #WeeklyReport #ProductReviews

State of (in)security - Week 19, 2026

Between May 4–11, 2026, the cybersecurity landscape saw 13 advisories and 14 incidents, with active exploits hitting Ivanti EPMM, Palo Alto PAN-OS, and DAEMON Tools (supply chain), along critical flaws in Chrome, MOVEit, PostgreSQL/MariaDB, and Ollama AI servers. Major breaches included ransomware attacks on Fiserv, Liberty Mutual, and Champion Homes, an AWS data center overheating outage disrupting financial platforms, and a $155,000 prompt injection theft from a Grok-linked crypto wallet.

**Patch your browser (Chrome/Edge/Brave/Opera) and your Android phone today, both have critical flaws. And never run .exe files sent by "recruiters" on social media, no matter who the message appears to come from.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-19-2026-5-8-v-k-b/gD2P6Ple2L

State of (in)security - Week 18, 2026

During week 18 of 2026 (April 27–May 4), there were 13 vulnerability advisories and 26 incidents affecting roughly 9.6 million individuals, with the largest being the Pitney Bowes breach by ShinyHunters (8.2M records); ransomware and malware drove most incidents, hitting healthcare and IT hardest. Critical vulnerabilities were patched across major platforms including GitHub, Microsoft Entra ID, Spring Boot, cPanel, and the Linux kernel.

**This week the most critical items are your Linux and cPanel patches. If you run Linux servers, especially shared environments like Kubernetes clusters, CI/CD runners, or multi-tenant hosts, patch your kernel immediately. If you can't patch right away, disable the vulnerable module by running echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf followed by rmmod algif_aead, and for untrusted code environments block AF_ALG socket creation via seccomp as a long-term safeguard.

If you use cPanel or WHM on your servers, this is urgent, you are being hacked. Immediately run /scripts/upcp --force to apply the emergency patch, then verify the version with /usr/local/cpanel/cpanel -V. Until you've confirmed the update, block external access to ports 2083 and 2087. If you are using cPanel as a customer, reach to your hosting provider to confirm that they have updated cPanel.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-18-2026-p-9-4-5-m/gD2P6Ple2L

State of (in)security - Week 17, 2026

Between April 20–27, 2026, there were 10 vulnerability advisories and 21 cybersecurity incidents impacting nearly 1 million individuals, with the largest being the UK Biobank breach exposing 500,000 records. Key threats included ransomware attacks, extortion campaigns (ADT, Udemy, Canada Life), critical vulnerabilities across Oracle, Microsoft ASP.NET Core, and Atlassian, plus actively exploited flaws in Cisco, Zimbra, and D-Link products.

**If you use the Bitwarden CLI (@bitwarden/cli) version 2026.4.0, treat it as fully compromised - uninstall it immediately, downgrade to 2026.3.0, and rotate every credential on that machine (GitHub/npm tokens, AWS/GCP/Azure keys, SSH keys, .env secrets). Block audit.checkmarx.cx at your network egress and audit your GitHub account for unauthorized repos or workflow changes.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-17-2026-x-h-q-2-3/gD2P6Ple2L

Really need to remember to manually scrobble all the records…. #LastFM #WeeklyReport #xp

State of (in)security - Week 16, 2026

Week 16 of 2026 saw 17 advisories and 22 incidents, with 16.7 million individuals impacted, driven largely by the McGraw-Hill Salesforce misconfiguration breach (13.5M) alongside major ransomware, phishing, and third-party compromises affecting healthcare, finance, and tech sectors. Key vulnerabilities included actively exploited zero-days in Microsoft products, critical flaws in Cisco, Fortinet, SAP, and Adobe, and a systemic RCE risk in the MCP protocol.

**This week third party libraries and AI are the focus: If you're using Claude Code, update immediately to the latest version and stop using authentication helpers. Instead, set the ANTHROPIC_API_KEY environment variable directly. If you use Axios in your applications, start planning an update to version 1.15.0 or later. Make sure your nginx-ui instances are isolated from the internet and accessible from trusted networks only.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-16-2026-q-8-4-u-9/gD2P6Ple2L

State of (in)security - Week 15, 2026

During the week of April 6–13, 2026, there were 9 vulnerability advisories and 23 data breach/incident events, up from 20 the prior week affecting over 41,500 known individuals across sectors like IT, healthcare, and government, with malware/ransomware and third-party compromises as the leading causes. Major events included several actively exploited zero-days (e.g., Adobe Reader, Chrome), major breaches at organizations like LAPD (7.7 TB leaked) and a Chinese supercomputing center (10 PB), and multiple ransomware attacks disrupting healthcare and other critical services.

**Update your Adobe Acrobat and Reader immediately because attackers are already using this flaw to take over computers through simple PDF files. If you cannot patch right away, use a browser-based PDF viewer as a temporary safety measure and disable Javascript in your Adobe Acrobat and Reader.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-15-2026-n-p-y-k-7/gD2P6Ple2L

State of (in)security - Week 14, 2026

During the week of March 30–April 6, 2026, cybersecurity activity included 11 vulnerability advisories (featuring actively exploited zero-days in Citrix, Fortinet, and TrueConf) and 20 incidents dominated by ransomware/malware (5), third-party compromises (3), and heavily hitting healthcare (6) and tech (4). At least 178,530 individuals are affected, led by the DocketWise breach exposing 116,000 immigration client records.

**This week, focus on patching critical and actively exploited flaws in Cisco and Fortinet. Hackers love these systems, because they can't really be isolated from the internet - they are designed to be visible.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-14-2026-4-w-k-u-i/gD2P6Ple2L

State of (in)security - Week 13, 2026

During the week of March 23–30, 2026, cybersecurity incidents surged to 32 (up from 14 the prior week), impacting over 14.6 million individuals, with malware/ransomware as the leading cause (11 incidents) and healthcare and government as the most targeted sectors. The week also saw 16 vulnerability advisories, including critical zero-days in F5 BIG-IP and Telegram alongside supply chain attacks and breaches affecting organizations from the European Commission to major healthcare providers.

**Treat AI browser extensions as extremely dangerous high-privilege agents. If you use the Claude Chrome Extension, make sure it's updated to version 1.0.41 or higher immediately! Older versions allow attackers to silently hijack your browser session and access your email, documents, and chat history without any clicks. Review what permissions the extension has and stay alert for suspicious sites that may have exploited this before the patch.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-13-2026-r-f-h-6-5/gD2P6Ple2L

State of (in)security - Week 12, 2026

During the week of March 16–23, 2026, there were 17 vulnerability advisories and 14 data breach/incident events. Social engineering, phishing, and unauthorized access are the leading causes impacting nearly 9 million individuals across government, healthcare, and tech sectors. Key threats included actively exploited zero-days in Chrome, SharePoint, and iPhones, a major supply chain attack on Aqua Security's Trivy scanner. Major incidents are the 5-million-record Companies House data leak and a paralyzing ransomware attack on Foster City.

**If you use Trivy, trivy-action, or setup-trivy in your pipelines, this is urgent and important! Treat all secrets that ran through affected pipelines as compromised: rotate them now and investigate logs for all systems where those secrets may have given access. Then immediately pin to the known safe versions GitHub Actions to full commit SHA hashes instead of version tags, since tags can be silently rewritten to point to malicious code.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-12-2026-9-y-7-3-x/gD2P6Ple2L

State of (in)security - Week 11, 2026

During the week of March 9–16, 2026, the cybersecurity landscape saw 22 advisories and 16 incidents including ransomware, data breaches, and actively exploited vulnerabilities in products like SolarWinds, Ivanti, and Salesforce. Over 3.3 million individuals impacted, largely by a single Cal AI breach exposing 3 million records. Malware/ransomware and software vulnerability exploits were the leading causes, hitting sectors from healthcare and finance to consulting and food & beverage.

**If you use AI platforms and chatbots, remember that they are just web applications and have a bunch of other possible flaws. Make sure databases, API endpoints, and system prompts are locked down with proper authentication, access controls, and integrity monitoring, not left exposed as an afterthought. Regularly audit your AI infrastructure for basic web application flaws like exposed APIs, SQL injection, and missing authentication, because even the most advanced AI tools can be undone by classic, well-known security mistakes.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-11-2026-m-2-h-j-4/gD2P6Ple2L

State of (in)security - Week 10, 2026

During the week of March 2–9, 2026, there were 15 vulnerability advisories (including 5 actively exploited flaws in products like VMware, Cisco, and WordPress) and 17 incidents led by the LexisNexis AWS cloud breach (400K individuals affected), an FBI surveillance systems breach. Multiple ransomware attacks hitt government, healthcare, and education sectors.

**Update your Comet browser, or even better, wipe it from your system. It's too dangerous. Treat AI agents as untrusted insiders and manually restrict their access to sensitive websites or local files. Always enable 'ask before filling' in your password manager to prevent agents from accessing credentials without your explicit consent. Treat AI documentation feeds as executable code and never assume a tool is safe just because it has high GitHub stars. Limit your AI assistant's file system permissions and verify the source of all instructions delivered through MCP servers.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-10-2026-a-u-t-w-s/gD2P6Ple2L

State of (in)security - Week 9, 2026

During the week of Feb 23–Mar 2, 2026, there were 21 vulnerability advisories and 15 data breach/ransomware incidents, heavily concentrated in healthcare impacting over 53 million individuals, highlighted by the ManoMano breach (38M records) and a billion-record exposure from a system misconfiguration.

**Treat AI tool configuration files with the same suspicion as executable binaries. Treat local AI agents as high-privilege and very dangerous Be aware that most AI tools are half-baked extremely vulnerable products that developers didn't design or test properly and push the security problem on the user. Ideally, don't use them. If you do use them, DO NOT TRUST THEM. Isolate them on a separate computer, severely limit their access and granted abilities.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-9-2026-r-j-g-q-0/gD2P6Ple2L

State of (in)security - Week 8, 2026

During the week of Feb. 16–23, 2026, cybersecurity activity included 11 vulnerability advisories (including critical flaws in Honeywell, Chrome, WordPress plugins, and industrial IoT devices, plus an actively exploited Dell zero-day) and 19 incidents, primarily data breaches and ransomware attacks across healthcare, retail, and hospitality impacting over 1.2 million individuals.

**=As usual, vibe coded and AI applications are dangerous. They are rushed, not tested properly and always in a state of Minimal Viable Product. If possible, AVOID THEM LIKE THE PLAGUE THAT THEY ARE. If you do use OpenClaw, upgrade to version 2026.2.14 or later ASAP. If you can't upgrade right away, make sure OpenClaw is not exposed to any untrusted networks and disable any extensions you're not actively using.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-8-2026-5-m-n-1-c/gD2P6Ple2L

State of (in)security - Week 7, 2026

During the week of Feb. 9–16, 2026, 19 vulnerability advisories and 16 incidents were recorded. Critical patches were released by major vendors including Microsoft, Apple, Adobe, Fortinet, and Ivanti, several are actively exploited. Data breaches and ransomware attacks hit healthcare, government, and tech sectors and impacted over 50.8 million individuals. The largest exposure was caused from a Firebase misconfiguration in the Codeway AI Chat App leaking 300 million messages.

**Disable AI extensions that have local system access if they also read data from public sources like calendars or email. You should never allow an autonomous agent to bridge untrusted external content directly to your operating system's command line. Treat AI agents as privileged entities and implement monitoring to detect unauthorized command execution.
When developing a product, always make sure to patch your own product instances. Because you are just as exposed, and you don't have a lot of reasonable arguments not to patch.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-7-2026-r-9-i-o-b/gD2P6Ple2L

State of (in)security - Week 6, 2026

**AI tools are under attack and full of vulnetabilities in the past week. The rule stands, this is a half-baked technology, and everyone is rushing to push out incomplete and very insecure products. Research a lot before deploying, and always deploy with a lot of isolation and blocks from your real life. Or just accept you have installed something imminently vulnerable.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-6-2026-9-i-9-j-j/gD2P6Ple2L

State of (in)security - Week 5, 2026

During the week of January 26 to February 2, 2026, there were 15 vulnerability/advisory events and 18 security incidents affecting approximately 154,000 individuals, with the largest breach exposing 100,000 users from the StopICE activist platform. Critical vulnerabilities were patched across multiple systems including active exploits in Fortinet FortiOS, Ivanti EPMM, Microsoft Office, and WinRAR. Major data breaches impacted organizations including KPMG Netherlands, Crunchbase, Panera Bread, and Match Group.

**This week focus on patching MS Office. Hackers attack with malicious MS Office documents. Restart all Microsoft 365 and Office 2021 applications immediately to trigger the service-side security fix. For older versions like Office 2016, apply registry workarounds until Microsoft releases a formal patch.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-5-2026-9-2-a-i-d/gD2P6Ple2L

State of (in)security - Week 4, 2026

During the week of January 19-26, 2026, there were 15 vulnerability advisories and 20 security incidents, with a massive infostealer database breach exposing 149 million credentials accounting for the majority of 149.7 million total impacted individuals. The week saw active exploitation of vulnerabilities on multiple platforms (Fortinet, VMware, Cisco) and ransomware attacks. Healthcare is the most targeted industry sector.

**Be aware that all MCP servers are vulnerable various prompt injections. Always add filtering and validation to all inputs to the AI Agent and to the MCP server. If you are using Anthropic mcp-server-git, update it to version 2025.12.18 ASAP and avoid running Git and filesystem MCP servers on the same host.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-4-2026-s-m-n-e-r/gD2P6Ple2L

State of (in)security - Week 3, 2026

During the week of January 12-19, 2026, there were 25 vulnerability advisories and 21 security incidents affecting approximately 20.6 million individuals. The week saw critical vulnerabilities across major platforms (Microsoft, Adobe, Google, SAP, Fortinet) and significant ransomware attacks. Healthcare is the most impacted industry sector.

**Even if you are a cybercrime forum, you still need to be very careful about security practices. Probably even more so, because both criminals and law enforcement are watching. And there is no honor towards a cybercrime forum.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-3-2026-h-o-4-7-e/gD2P6Ple2L

State of (in)security - Week 2, 2026

During the week of January 5-12, 2026, there were 19 cybersecurity advisories/vulnerabilities and 19 incidents/data breaches. The total number of impacted individuals surged from 1.05 million to 19 million, primarily driven by an Instagram API dump that leaked 17.5 million user records. The week saw critical vulnerabilities actively exploited across multiple platforms (including HPE OneView, Adobe ColdFusion, and legacy D-Link routers) and widespread ransomware attacks and data breaches affecting healthcare, education, and government sectors.

**Vendors of AI are racing to push out products with very limited controls and the users are at risk. Limit the data your AI agents can access by using the principle of least privilege for all app connectors. Turn off the 'Memory' feature if your team does not need the AI to remember details across different chat sessions to prevent persistent prompt injection. Limit the abilities of the Agents to not be able to impersonate you without enforced human review and decision.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-2-2026-l-3-f-g-x/gD2P6Ple2L

State of (in)security - Week 1, 2026

During the week of December 29, 2025 to January 5, 2026, there were 7 vulnerability advisories and 19 security incidents affecting over 1 million reported individuals. Healthcare and finance are the most targeted sectors. The largest breach was the Illinois Department of Human Services incident exposing 705,000 people's data. Critical flaws were reported in multiple systems including Apache, GNU Wget2, and SmarterMail.

**Make sure all MongoDB database servers are isolated from the internet and accessible from trusted networks only. Then patch ASAP! If you can't update your MongoDB instance immediately, disable zlib compression.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-1-2026-x-u-n-j-e/gD2P6Ple2L

State of (in)security - Week 52, 2025

During the week of December 22-29, 2025, there were 20 cybersecurity incidents (up from 16 the previous week) and 6 vulnerability advisories, impacting approximately 2.8 million individual. The largest breach is WIRED/Condé Nast affecting 2.3 million subscribers. The incidents were primarily driven by malware/ransomware attacks and third-party compromises. The finance and IT sectors being the most heavily targeted.

**If you're running MongoDB servers, first check if they are exposed to the internet. If yes this is urgent. Upgrade to the patched versions (8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30). Alternatively, isolate from the intenet, disable zlib compression and plan a patch cycle.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-52-2025-k-y-a-i-8/gD2P6Ple2L

State of (in)security - Week 51, 2025

During the week of December 15-22, 2025, there were 17 vulnerability/advisory events and 16 data breach incidents, and over 28 million individuals impacted primarily due to the SoundCloud breach. The cybersecurity landscape is dominated by actively exploited critical vulnerabilities on multiple platforms (including Fortinet, Cisco, ASUS, and WatchGuard) and ransomware attacks. Healthcare is the most targeted industry.

**We've seen secrets in code, but storing PII in code repository is totally weird, especially when you think of the code repository of just program code and forget the data files. Never store PII in code repository. There are so many ways to expose it. And make sure to delete data of former customers unless you are legally required to keep it.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-51-2025-k-r-k-t-z/gD2P6Ple2L

State of (in)security - Week 50, 2025

During the week of December 8-15, 2025, there were 16 vulnerability advisories (including actively exploited flaws in GeoServer, Gogs, Chrome and WebKit) and 13 security incidents affecting 296,100 individuals. Ransomware attacks dominate breach causes and healthcare is the most targeted industry. Critical vulnerabilities were patched across major vendors including Microsoft, Apple, Adobe, Fortinet, Google and ConnectWise.

**Data brokers are just greedy, but not at all good with their data protection. Because it's not their data, it's simply grabbed and abused.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-50-2025-w-9-g-3-l/gD2P6Ple2L

State of (in)security - Week 49, 2025

During the week of December 1-8, 2025, cybersecurity events increased to 14 vulnerability advisories and 17 data breach incidents, impacting approximately 5.6 million individuals, primarily through the 700Credit breach exposing auto financing records. Healthcare was the most affected sector (5 incidents), and the primary attack vectors included software vulnerability exploits, ransomware attacks, and system misconfigurations.

**The key advisory from this week is PATCH React and Next.js! If you're running React 19.x or Next.js 15.x/16.x (or frameworks using React Server Components like Waku or Redwood), attackers are already hacking your systems. Prioritize patching right now.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-49-2025-9-0-3-l-f/gD2P6Ple2L

State of (in)security - Week 48, 2025

During the week of November 24-December 1, 2025, cybersecurity activity showed 8 vulnerability advisories and 13 incidents affecting approximately 474,000 individuals across multiple sectors. Healthcare is the most targeted industry (4 incidents). The week featured a mix of critical vulnerabilities requiring patching, active exploitation campaigns (including AI framework and NPM supply chain attacks), and significant data breaches. The largest being a UK broadband provider breach exposing over 230,000 customer records.

**Don't panic over urgent "account blocked" warnings in unexpected emails. Never click links or open files in these messages. Instead, type the official website address of your cloud provider directly into your browser to check your actual account status.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-48-2025-j-z-k-0-j/gD2P6Ple2L

State of (in)security - Week 47, 2025

During the week of November 17-24, 2025, cybersecurity incidents jumped with 29 data breaches/incidents, up from 20 the previous week. There are also 13 vulnerability advisories. Incidents are mostly ransomware attacks, third-party compromises, and actively exploited critical vulnerabilities in Oracle, Chrome, and FortiWeb. The largest breach occurred at France's Urssaf Pajemploi service exposing 1.2 million childcare workers' data.

**Don't manage authentication or trust with HTTP headers. They can be faked. If you do, make sure to remove your "special" HTTP header on the gateway or load balancer level.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-47-2025-h-2-3-1-t/gD2P6Ple2L

State of (in)security - Week 46, 2025

**The development of AI tool is still very much rushed, with insufficient security testing and a lot of copy-paste from other framework. All this because it's a rush to production, not building a secure product. The end user will probably suffer most. In general, be very conservative with AI frameworks, test a lot and patch very fast. And remember that AI apps are also vulnerable to all the classic web application vulnerabilities that have nothing to do with AI.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-46-2025-s-i-g-e-w/gD2P6Ple2L

State of (in)security - Week 45, 2025

During the week of November 3-10, 2025, there were 19 vulnerability advisories (up from 9 the previous week) and 13 data breach incidents affecting 241,738 individuals. Ransomware/malware attacks are the leading cause (4 incidents) and a major healthcare breach at Central Jersey Medical Center exposing 131,000 patient records. Critical vulnerabilities were reported on multiple platforms including Apple iOS, Google Chrome/Android, AMD processors, and WordPress plugins. Active exploitation is confirmed in CentOS Web Panel and several WordPress themes.

**If you have the Post SMTP plugin on WordPress, update to version 3.6.1 right now. Attackers are actively exploiting it to reset admin passwords and hijack sites.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-45-2025-h-h-r-j-z/gD2P6Ple2L

State of (in)security - Week 44, 2025

During the week of October 27 - November 3, 2025, there were 9 vulnerability advisories and 16 security incidents/data breaches affecting approximately 330,000 individuals. Malware/ransomware attacks (4 incidents) and third-party compromises are the primary threats. The healthcare sector was most impacted with 4 incidents, including a major Blue Cross Blue Shield of Texas breach affecting 310,000 customers through a third-party vendor compromise.

**All Chromium based browsers (Chrome, Edge, Vivaldi, Opera, Brave...) are vulnerable to being crashed by just visiting a web page. And there is no fix. So be extremely careful clicking unknown links, ideally use Firefox or Safari since they are not vulnerable, and keep up with updates for Chromium based browsers.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-44-2025-h-7-h-x-d/gD2P6Ple2L

State of (in)security - Week 43, 2025

During the week of October 20-27, 2025, there were 12 vulnerability advisories and 12 security incidents affecting 17.4 million individuals, with the largest breach being aggregated infostealer data exposing 183 million email accounts and passwords (16.4 million previously not listed as breached). The primary attack vectors included malware/ransomware (4 incidents), critical software vulnerabilities in various platforms (including WordPress, Chrome, Microsoft 365 Copilot, and others), and active exploitation of authentication bypass flaws and zero-day vulnerabilities.

**If you are installing any AI based tools locally, be aware that AI vendors are not that disciplined in updating those tools. For example Cursor or Windsurf AI-powered code editors, haven't been updated for months.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-43-2025-d-2-r-h-4/gD2P6Ple2L

Weekly Crypto Market Roundup: Top Gainers and Losers Revealed - This week saw notable movements in the crypto market, with some assets experiencin... - https://news.bitcoin.com/this-week-in-crypto/ #weeklyperformance #weeklyoverview #marketupdates #weeklyroundup #weeklylosses #weeklyreport #weeklygains #weeklyrecap #weeklydata

Weekly Crypto Market Roundup: Top Gainers and Losers Revealed - This week saw notable movements in the crypto market, with some assets experiencin... - https://news.bitcoin.com/this-week-in-crypto/ #weeklyperformance #weeklyoverview #marketupdates #weeklyroundup #weeklylosses #weeklyreport #weeklygains #weeklyrecap #weeklydata

Weekly Crypto Market Roundup: Top Gainers and Losers Revealed - This week saw notable movements in the crypto market, with some assets experiencin... - https://news.bitcoin.com/this-week-in-crypto/ #weeklyperformance #weeklyoverview #marketupdates #weeklyroundup #weeklylosses #weeklyreport #weeklygains #weeklyrecap #weeklydata

Weekly Crypto Market Roundup: Top Gainers and Losers Revealed - This week saw notable movements in the crypto market, with some assets experiencin... - https://news.bitcoin.com/this-week-in-crypto/ #weeklyperformance #weeklyoverview #marketupdates #weeklyroundup #weeklylosses #weeklyreport #weeklygains #weeklyrecap #weeklydata