The Exploit Post

Sign in Subscribe

Red Dog Security

Hack of OnSolve CodeRED Platform Disrupts Emergency Alert Systems

Hack of OnSolve CodeRED Platform Disrupts Emergency Alert Systems

The ransomware group INC claimed responsibility for hacking the OnSolve CodeRED platform, which US government and municipal services use to send emergency notifications to residents. The attack disrupted emergency alert systems across the country and resulted in a leak of users' personal data. The CodeRED platform by Crisis24 serves

Five Fluent Bit Vulnerabilities Threaten Cloud Infrastructures

Five Fluent Bit Vulnerabilities Threaten Cloud Infrastructures

Researchers at Oligo Security discovered five vulnerabilities in Fluent Bit that, when exploited in combination, could compromise entire cloud infrastructures, including Kubernetes clusters. Fluent Bit is an open-source solution for collecting, processing, and routing logs and metrics. The tool is deployed across enterprise environments, container platforms, Kubernetes clusters, and cloud

AI Browsers Can Be Tricked Using the "#" Symbol

AI Browsers Can Be Tricked Using the "#" Symbol

Researchers from Cato Networks have discovered a new attack method targeting AI browsers called HashJack. The technique uses the "#" symbol in URLs to inject hidden commands that AI assistants execute, bypassing traditional security measures. How HashJack Works The HashJack attack exploits a fundamental characteristic of web URLs: the

Unused SSDs Slowly Lose Data

Unused SSDs Slowly Lose Data

XDA Developers reminds us that using solid-state drives (SSDs) for long-term archival storage carries significant risk. SSDs left unpowered for years can experience data corruption or complete data loss. Unlike HDDs, which store data on magnetized platters, SSDs record information by altering the electrical charge in NAND flash memory cells.

Shai-Hulud Worm Returns to npm, Compromises Over 25,000 Developers

Shai-Hulud Worm Returns to npm, Compromises Over 25,000 Developers

The self-propagating Shai-Hulud malware has returned to npm, compromising over 25,000 developers in just three days. Hundreds of infected versions of popular packages—including Zapier, ENS Domains, PostHog, Postman, and AsyncAPI—were uploaded to npm to steal developer and CI/CD secrets. Scale of the Attack According to analysts

Palo Alto Networks Studies LLMs Built for Hackers

Palo Alto Networks Studies LLMs Built for Hackers

A new category of Large Language Models (LLMs) designed specifically for cybercriminals has emerged on the black market—models that operate without ethical safeguards or content restrictions. Researchers from Palo Alto Networks analyzed two such models: the commercial WormGPT 4 and the free KawaiiGPT. WormGPT 4: Commercial Malware Generation WormGPT

Tsundere Botnet Uses Blockchain to Target Windows Users

Tsundere Botnet Uses Blockchain to Target Windows Users

Kaspersky Lab researchers have discovered a new botnet named Tsundere that targets Windows devices using PowerShell scripts or MSI installers. The malware distributes itself by masquerading as installers for popular games including Valorant, CS2, and R6x. Geographic Targeting Tsundere attacks have been recorded primarily in Mexico and Chile. Technical analysis