Tag: supply chain vulnerability
28 articles
Unpatched Flaw Exposes Hugging Face LeRobot to Remote Code Execution
A critical, unpatched vulnerability in Hugging Face's LeRobot platform, rated CVSS 9.3, allows hackers to remotely execute code by exploiting Python's insecure pickle format, putting users at risk of devastating attacks. This flaw enables unauthenticated attackers to gain control by deserializing malicious data sent over unsecured channels.
CISA Warns of Persistent Cisco Backdoor on Federal Networks
The Cybersecurity and Infrastructure Security Agency (CISA) has detected a sneaky backdoor, dubbed Firestarter, lurking on federal networks, which may not have been fully eliminated by Cisco's recent patches. Federal agencies are now on high alert, urged to hunt for this stealthy malware that could compromise their networks.
Grinex Hack Exposes Crypto Vulnerabilities
A shocking $13.7 million theft has forced Kyrgyzstan-based crypto exchange Grinex to suspend operations, with the company making the explosive claim that Western intelligence agencies were behind the hack. But with more questions than answers, what's really going on?
Iranian Campaign Targets 3,900 Devices in US Infrastructure
A recent Iranian cyber campaign has set its sights on a staggering 3,900 exposed devices in US infrastructure, putting energy, water, and government services at risk. This large-scale threat is a clear warning sign that these critical systems may be vulnerable to attack.