Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.

The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek.

https://www.securityweek.com/in-other-news-tor-exit-relays-hijacked-banks-spot-rogue-ai-agents-self-rebuilding-macos-ransomware/

Quest Diagnostics, a diagnostic information services provider, revealed it experienced a cyber breach.

https://www.securitymagazine.com/articles/102689-cyber-breach-hits-quest-diagnostics-patient-records-may-be-affected

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.

The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek.

https://www.securityweek.com/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge/

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek.

https://www.securityweek.com/china-apt-uses-ai-pentest-tool-artex-in-connectwise-attacks/

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

The post Attackers Exploit Third Arista VCO Zero-Day in Four Months appeared first on SecurityWeek.

https://www.securityweek.com/attackers-exploit-third-velocloud-orchestrator-zero-day-in-four-months/

Tariffs are typically viewed through an economic lens: higher prices, increased costs and impacts on consumers and corporate profitability.

https://www.securitymagazine.com/articles/102582-tariffs-and-supply-chain-security-an-emerging-security-challenge

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek.

https://www.securityweek.com/11-million-impacted-by-capcom-data-breach/

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek.

https://www.securityweek.com/quest-diagnostics-reports-cyber-breach-affecting-certain-patient-records/

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.

The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek.

https://www.securityweek.com/litellm-compromised-in-fresh-supply-chain-attack/

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.

The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek.

https://www.securityweek.com/atlassian-patches-75-third-party-flaws-in-data-center-and-server-products/