SolarWinds Serv-U Exploited, Fake AI Tools Drop Malware, and Claude Gets Weaponized for Recon

News

SolarWinds Serv-U Path Traversal Flaw Actively Exploited in the Wild

CVE-2024-28995 is being actively exploited, letting unauthenticated attackers read arbitrary files from Serv-U servers. If you're running Serv-U in your environment and haven't patched, that's a fire drill right now.

Threat Intel

Fake AI Video and Image Tools Being Used to Distribute Infostealer Malware

Threat actors are packaging infostealers inside fake AI productivity tools promoted through social media and SEO poisoning. The pattern is getting more polished and harder to detect without behavioral analysis.

Tools

CISA Releases Malcolm 25.05 with Expanded Network Traffic Analysis Capabilities

Malcolm's latest release adds improved protocol dissection and better integration with Zeek and Suricata for network visibility. Free, open source, and increasingly production-grade for teams that can't afford commercial NDR.