‘PlushDaemon’ hackers hijack software updates in supply-chain attacks

Published on November 19, 2025

The China-aligned advanced persistent threat (APT) tracked as 'PlushDaemon' is hijacking software update traffic to deliver malicious payloads to its targets. [...]

Continue reading on website
Other news

ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

November 19, 2025
Malicious actors can exploit default configurations in ServiceNow's Now Assist generative artificial intelligence (AI) platform and leverage its agentic capabilities to conduct prompt injection attacks.The second-order prompt injection, according to AppOmni, makes use of Now Assist's agent-to-agent discovery to execute unauthorized actions, enabling attackers to copy and exfiltrate sensitive

Cloudflare blames this week's massive outage on database issues

November 19, 2025
On Tuesday, Cloudflare experienced its worst outage in 6 years, blocking access to many websites and online platforms for almost 6 hours after a change to database access controls triggered a cascading failure across its Global Network. [...]