Skip to content
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

Ravie LakshmananOct 15, 2026Supply Chain Attack / Cloud Security The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed… 

Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February… 

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Ravie LakshmananOct 15, 2026Vulnerability / Cryptojacking Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.… 

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday. The attacker sends an email…