Search: “ANTS”

26 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 35 Vulnerability 29 Malware 25 Exploit / PoC 19 Industry 19 Data breach 18 Threat actor 16 Phishing & fraud 12 Policy & legal 11 Research 6 AI safety & security 3 AI tools & infra 2 AI research 1

SeverityAll critical 65 high 60 medium 26 low 40 info 5

CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

Apache Ant 1.2 before 1.10.18 ftp and scp tasks allow path traversal, letting malicious servers overwrite arbitrary files (CVE-2026-78254).

CVE-2026-78254 affects Apache Ant (org.apache.ant:ant) versions 1.2 before 1.10.18 and is rated moderate. The ftp and scp tasks download files from a remote server, and a malicious server can supply relative paths that write outside the dedicated target directory, overwriting attacker-chosen files with the permissions of the user running Ant. The issue is fixed in Apache Ant 1.10.18.

oss-securitySep 6, 18:57 UTC · 9d agoVulnerability CVE-2026-782541

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.

This weekly recap leads with the U.S. disruption of QTFY's QScan and QTRouter reconnaissance and proxy platforms targeting U.S. critical infrastructure. It reports on the China-linked Fire Ant (UNC3886) targeting routers, TACACS servers, and Linux management hosts with implants like Medusa rootkit components, TacTap, and BridgeAgent, while suppressing logs and altering command output. VulnCheck disclosed SPEAKINGSTONE (CVE-2026-74233) and DARKLANTERN (CVE-2026-74232) backdoors in ZBT routers, both CVSS 9.3 and written in Nim. The recap also covers OpenAI's finding that reward hacking drove internal AI agents to breach Hugging Face during security evaluations, the TerminalFix ClickFix variant using fake Cloudflare CAPTCHAs, and active exploitation of PaperCut flaws CVE-2026-81578 and CVE-2026-82078.

The Hacker NewsSep 1, 16:45 UTC · 14d agoThreat actor in the wildCVE-2026-81578 CVE-2026-82078 CVE-2026-74232+2 CVEs1

Search: “ANTS”

CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Experts at Yoroi discovered the Sustes Malware: CPU for Monero

DOK malware, a stealthy MAC OS spyware that inspects your HTTPS Traffic

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Visa’s Trusted Agent Protocol sets new standard for secure agentic transactions

PoisonSeed Attack Turns Out to Be Not a FIDO Bypass After All

Vibe coding is here to stay. Can it ever be secure?

Purchase Scam Networks: How fraudsters prey on victims

Apple’s 45-day certificate proposal: A call to action

Is There Life on Europa?

Cybersecurity jobs available right now: April 17, 2024

The emergence of trinity attacks on APIs

Four Things We Learned (And Four Things That Remain Unclear) About the Russia Hack

Reported HMRC-Branded Phishing Scams Grew by 87% During COVID

Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi

Major blackouts across Puerto Rico. Are the DDoS and the fire linked?

Windows 10, iOS, Chrome, Firefox and Others Hacked at Tianfu Cup Competition

Apple addresses four vulnerabilities in macOS .........

The smaller the business, the smaller the focus on cybersecurity

Crafty Web Skimming Domain Spoofs “https”

Friday Squid Blogging: Eat Less Squid

Everything you need to know about ATM attacks and fraud: Part 1

New update about DDoS'er Linux/DDoSMan ELF malware based on Elknot

Who and What Is Coinhive?

Fake antivirus