HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

Published on July 17, 2026

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. [...]

Continue reading on website
Other news

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

July 17, 2026
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and workflow builders that teams stand up fast and firewall late.The intel feed behind that counter

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

July 17, 2026
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack.The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,