en
JetBrains Marketplace AI Key Theft — 15 Malicious Plugins, 70K Installs, TLS Bypass
Security breakdown of 15 malicious JetBrains IDE plugins stealing OpenAI, Anthropic, and AWS API keys from 70,000 developers.
James Luther
es
JetBrains Marketplace AI Key Theft — 15 Malícious Plugins, 70K Installs, TLS Bypass
Desglose de seguridad de 15 plugins maliciosos JetBrains IDE robando OpenAI, Antroppic y AWS API de 70.000 desarrolladores.
en
DragonForce Backdoor.Turn — Microsoft Teams TURN Relay C2: Attack Chain & Detection
How DragonForce ransomware operators abused Microsoft Teams TURN server relays to bypass firewall egress filtering for C2 traffic.
es
DragonForce Backdoor. Turn — Microsoft Teams TURN Relay C2: Cadena de ataque " detección
Cómo los operadores de ransomware de DragonForce abusaron de los servidores de Microsoft Teams TURN para evitar el filtro de egress de firewall para el tráfico C2.
en
CVE-2026-20262: Cisco SD-WAN Manager Zero-Day — Path Traversal to Root + CISA KEV
Technical root cause and remediation for the actively exploited Cisco SD-WAN Manager path traversal flaw.
es
CVE-2026-20262: Cisco SD-WAN Manager Día Cero — Path Traversal to Root + CISA KEV
Causa de raíz técnica y remediación para el funcionamiento activo de Cisco SD-WAN Manager falla transversal.
en
Security Roundup: Oracle PeopleSoft Zero-Day, June Patch Tuesday, Chrome V8 Exploit, TanStack Supply Chain — Week of June 12, 2026
Weekly briefing: Oracle PeopleSoft zero-day exploited by ShinyHunters, Chrome V8 in-browser RCE, and TanStack Mini Shai-Hulud worm.
es
Redonda de seguridad: Oracle PeopleSoft Día Cero, June Patch Martes, Chrome V8 Exploit, TanStack Cadena de suministro — Semana del 12 de Junio, 2026
Reunión informativa semanal: Oracle PeopleSoft día cero explotado por ShinyHunters, Chrome V8 en el navegador RCE, y TanStack Mini Shai-Hulud gusano.
en
CVE-2026-25089: FortiSandbox Unauthenticated RCE + CISA KEV June 9 Additions (Arista, Cisco SD-WAN)
Technical root cause for the unauthenticated OS command injection vulnerability in Fortinet FortiSandbox appliances.
es
CVE-2026-25089: FortiSandbox Unuthenticated RCE + CISA KEV June 9 Additions (Arista, Cisco SD-WAN)
Causa de raíz técnica para la vulnerabilidad de inyección de comando OS no autenticada en electrodomésticos Fortinet FortiSandbox.
en
TanStack npm "Mini Shai-Hulud" Supply Chain Worm — TeamPCP Attack Chain, IOCs & Full Remediation
How threat actor TeamPCP deployed the Mini Shai-Hulud worm to poison TanStack packages and compromise developer build environments.
es
TanStack npm "Mini Shai-Hulud" Cadena de Suministro - TeamPCP Cadena de Ataque, COI & Remediación completa
Cómo el actor de amenaza TeamPCP desplegó el gusano Mini Shai-Hulud para envenenar paquetes TanStack y entornos de construcción de desarrolladores de compromiso.