Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

FBI & CISA Alert: Russian SIM‑Swap Hijacks of Signal and WhatsApp

FBI & CISA Alert: Russian SIM‑Swap Hijacks of Signal and WhatsApp

The FBI and CISA released a joint advisory warning that Russian state‑aligned cyber‑espionage groups are conducting sophisticated SIM‑swap attacks to hijack user accounts on Signal and WhatsApp. By compromising the victim’s mobile number, the attackers can take control of the messaging apps, bypassing end‑to‑end

Security Culture & Human Factors

OWASP Sunsets Meetup Platform, Moves Community to Modern Collaboration Tools

The OWASP Foundation announced that its custom‑built Meetup platform will be retired effective immediately. Members of the global OWASP community are being directed to migrate their discussions, events, and knowledge‑sharing activities to contemporary services such as Discord, Slack, and various virtual conference systems. The decision is framed as

Malware & Ransomware

CanisterWorm Wiper Strikes Iranian Critical Infrastructure

Security researchers have confirmed that the CanisterWorm wiper has been actively targeting Iranian critical infrastructure. The payload uses a multi‑stage infection chain: initial reconnaissance, credential harvesting, lateral movement, and finally a destructive payload that overwrites files and disables system services. The wiper is engineered to evade sandbox analysis and

AI Security & Threats

LiteLLM Backdoor Unveiled: Trivy Image Compromise Fuels Credential Harvest

LiteLLM Backdoor Unveiled: Trivy Image Compromise Fuels Credential Harvest

A follow‑up investigation by The Register confirmed that a malicious code injection was introduced into the LiteLLM library via a compromised Trivy container image. The hidden backdoor silently captured API keys and other secrets from applications that imported LiteLLM, then relayed them to the attackers’ command‑and‑control server.

Vulnerabilities & Exploits

Supply‑Chain Hijack: TeamPCP Backdoors LiteLLM via Corrupt Trivy Image

Supply‑Chain Hijack: TeamPCP Backdoors LiteLLM via Corrupt Trivy Image

Security researchers uncovered that the threat group TeamPCP injected malicious backdoors into recent releases of the open‑source LiteLLM library. The insertion stemmed from a tampered Trivy container image that was used in the library’s CI/CD pipeline. By compromising the image, the attackers were able to modify the

SOC & Automation

GreyNoise Feeds Real‑Time Blocklists into Google SecOps, Cutting Noise for Defenders

GreyNoise Feeds Real‑Time Blocklists into Google SecOps, Cutting Noise for Defenders

GreyNoise has launched a native integration with Google Cloud’s Security Operations (SecOps) suite that streams fully configurable, real‑time blocklists straight into the platform’s detection and response pipelines. The feed automatically tags and drops traffic originating from benign scanners, known research tools, and other low‑value sources, allowing

Vulnerabilities & Exploits

Open‑Source Display CLI Threatens CI/CD Supply‑Chain Integrity

Open‑Source Display CLI Threatens CI/CD Supply‑Chain Integrity

The GitHub project “displayflow_cli” offers a command‑line utility for configuring multiple monitors, a feature that can be handy for automating workstation setups in DevOps environments. However, the tool pulls in several external scripts at install time and provides only basic checksum verification, leaving the code path largely unchecked