RUSSIA CLAIMS FOREIGN SPYWARE TARGETS SENIOR OFFICIALS
■ AI-SUMMARIZED FROM 5 SOURCES ▸ TIMELINE
Russia's Federal Security Service announced it discovered a large-scale spyware operation targeting senior government officials' mobile phones, allegedly orchestrated by foreign intelligence agencies.
■ SOURCES
► Techmeme► Techmeme► Techmeme► Techmeme► Techmeme■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE
■ MORE FROM THE SECURITY DESK
A cross-site scripting (XSS) vulnerability in the ansi2html library exposed Sourcehut users to account takeover attacks through malicious build log output. The flaw allowed attackers to inject arbitrary code into rendered logs.
Two developers independently demonstrated that Meta's Muse AI can be prompted to download and share its entire filesystem, including system files and internal documentation. The vulnerability reportedly requires minimal effort to exploit.
Arista Networks has released security patches for a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem that is currently being exploited in the wild.
A new MacSync malware variant targeting macOS systems exploits public iCloud calendar events to deliver updated native payloads. The technique represents a shift in the malware's distribution strategy.