BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot (2026-10-24 14:17 UTC)
Kurz: A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and …
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication (2026-10-25 06:54 UTC)
Kurz: OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. “Based on the current state of alignment r…
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software (2026-10-24 11:09 UTC)
Kurz: A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-1114…
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline (2026-10-24 11:03 UTC)
Kurz: LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. “On May 27, 20…
Heute sind nur wenige frische, nicht doppelte Meldungen im 36h-Fenster aufgelaufen. Das ist typisch nach Wochenenden/Feiertagen oder wenn Feeds erst später am Vormittag aktualisieren.
Ausgeblendet: 79 ältere oder bereits gestern verwendete Feed-Einträge.