'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows Source: Dark Reading Researchers disclosed GitLost, a prompt-injection weakness in GitHub agentic workflows that could let unauthenticated attackers use a public GitHub issue to pull private repository data. The story highlights a fast-growing risk: AI agents with broad access can be manipulated by ordinary text if trust boundaries are weak. Link to article Fake IT support calls on Microsoft Teams push EtherRAT malware Source:...

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks Source: SecurityWeek Researchers linked the FortiBleed credential-harvesting campaign to INC and Lynx ransomware activity. SOCRadar reported scanning against thousands of FortiGate portals, hundreds of successful administrative compromises, and at least 12 ransomware deployments, showing how stolen edge-device credentials can quickly become enterprise-wide extortion access. Link to article China-Linked Group Targets Southeast Asia...

CISA warns of max severity Ubiquiti flaws exploited in attacks Source: BleepingComputer CISA warned that attackers are actively exploiting critical Ubiquiti UniFi OS flaws and Lantronix serial-to-ethernet server vulnerabilities. The directive gives federal agencies only three days to apply fixes or mitigations, underscoring how exposed edge and network management systems remain high-value targets for fast-moving exploitation. Link to article More Malicious OpenClaw Skills Threaten AI Supply...