Search: “static key”

346 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 323 Vulnerability 284 Ransomware 155 Data breach 94 Exploit / PoC 77 Threat actor 63 Policy & legal 53 Industry 42 Phishing & fraud 41 AI safety & security 36 AI tools & infra 23 Research 19 Tools 14 AI research 7

SeverityAll critical 419 high 346 medium 322 low 86 info 76

JWT used for authentication in web GUI signed with static key

Fortinet warns that FortiMonitorOnSight's web GUI uses JWTs signed with a static key, enabling remote unauthenticated authentication bypass.

Fortinet advisory FG-IR-26-170 discloses a CVSS 9.6 vulnerability (CWE-540, sensitive information in source code) in the FortiMonitorOnSight web portal. The web GUI's JWT authentication tokens are signed with a static key, allowing a remote unauthenticated attacker to bypass authentication via forged or reused JWTs. The advisory was revised on September 8, 2026.

Fortinet PSIRTSep 8, 07:00 UTC · 8d agoAdvisory

DragonOK Updates Toolset and Targets Multiple Geographic Regions

Palo Alto Unit 42Nov 1, 10:42 UTC · Nov 1, 2018Vulnerability CVE-2015-1641

Static SSH host key in Cisco Umbrella allows stealing admin credentials

Security AffairsApr 21, 12:11 UTC · Apr 21, 2022Vulnerability CVE-2022-20773

Mozilla will fix the cross-platform RCE flaw that threatened Tor anonymity

Security AffairsSep 18, 11:36 UTC · Sep 18, 2016Vulnerability

Operation AppleJeus: Lazarus hits cryptocurrency exchange with fake installer and macOS malware

Kaspersky SecurelistAug 23, 08:00 UTC · Aug 23, 2018Malware

Researchers released a free decryptor for Key Group ransomware

Security AffairsSep 1, 13:36 UTC · Sep 1, 2023Ransomware

Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

The Hacker NewsSep 5, 07:40 UTC · Sep 5, 2023Ransomware1

Attack on French Diplomat Linked to Operation Lotus Blossom

Palo Alto Unit 42Nov 1, 09:57 UTC · Nov 1, 2018Exploit / PoC CVE-2014-6332

Updated PClock Ransomware Still Comes Up Short

Palo Alto Unit 42Jan 28, 22:09 UTC · Jan 28, 2022Ransomware

Latest TeslaCrypt Ransomware Borrows Code From Carberp Trojan

Palo Alto Unit 42Jan 28, 22:09 UTC · Jan 28, 2022Ransomware

ToddyCat: Unveiling an unknown APT actor attacking high

Kaspersky SecurelistJun 21, 10:00 UTC · Jun 21, 2022Vulnerability

PowerWare Ransomware Spoofing Locky Malware Family

Palo Alto Unit 42Jan 28, 21:51 UTC · Jan 28, 2022Ransomware

Comnie Continues to Target Organizations in East Asia

Palo Alto Unit 42Nov 1, 11:01 UTC · Nov 1, 2018Malware

National Public Data Published Its Own Passwords

Krebs on SecurityAug 23, 15:48 UTC · Aug 23, 2024Data breach

NationalPublicData.com Hack Exposes a Nation’s Data

Krebs on SecurityAug 15, 00:00 UTC · Aug 15, 2024Data breach

Joker malware still able to bypass Google Play Store checks

Security AffairsFeb 22, 18:12 UTC · Feb 22, 2020Malware

Big banks want to intentionally weaken the internet’s most important security protocol

CyberScoopMar 1, 21:52 UTC · Mar 1, 2018Malware

Chinese state-sponsored hackers targets Russia and Belarus with ZeroT and PlugX

Security AffairsFeb 3, 18:38 UTC · Feb 3, 2017Threat actor CVE-2012-0158

RustDuck: The Botnet That's Still Small but Engineering Like It Plans to Grow

Security AffairsJul 1, 10:25 UTC · Jul 1, 2026Malware in the wildCVE-2025-29635 CVE-2017-17215 CVE-2024-1781+1 CVEs1

Akeyless introduces AI Agent Identity Security for safer AI operations

Help Net SecurityOct 30, 00:00 UTC · Oct 30, 2025Data breach

Updates from the MaaS: new threats delivered through NullMixer

Security AffairsMar 27, 13:41 UTC · Mar 27, 2023Malware

Nitroransomware demands gift codes as ransom payments

Security AffairsApr 19, 08:32 UTC · Apr 19, 2021Ransomware

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Malicious LiteLLM 1.82.7/1.82.8 PyPI releases tied to the Trivy TeamPCP campaign harvested cloud, SSH, and database credentials, potentially exposing 2,500+ organizations.

CloudSEK reported that two malicious LiteLLM releases on PyPI (versions 1.82.7 and 1.82.8, live about 40 minutes on March 24) harvested cloud keys, SSH keys, Kubernetes tokens, and database passwords, with captured loot files mapping potential exposure to more than 2,500 organizations including NVIDIA, Cisco, Deloitte, Volkswagen, FedEx, Siemens, and X Corp. The campaign is part of TeamPCP (tracked by Google as UNC6780), linked to the Aqua Security Trivy scanner compromise tracked as CVE-2026-33634 and added to CISA's Known Exploited Vulnerabilities catalog on March 26. The payload used a litellm_init.pth file executed at Python interpreter startup and exfiltrated secrets to models.litellm[.]cloud; the FBI's FLASH-20260702-01 advisory urged rotation of CI/CD, publishing, and cloud credentials.

The Hacker NewsAug 12, 08:05 UTC · Aug 12, 2026Data breach in the wildCVE-2026-33634