Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link (The Hacker News)
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-s - SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild (The Hacker News)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploit - U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions (KrebsOnSecurity)
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and - Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee (Schneier on Security)
I feel like someone who reads this blog will want to go to this : Families are invited to dive into the fascinating world of marine biology during an exciting, hands-on Family Squid Dissection at the Hands-On Science Center. Designed for cu - On Anthropic’s AI Misuse Report (Schneier on Security)
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings. A few of the highlights: AI agents increasingly handled reconnaissance,
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →