Tokens

Open5GS WebUI defaults its JWT signing secret to "change-me," allowing attackers with WebUI access to forge administrative tokens.

Aviz Networks released ONES 2.0 with a rule engine that pushes network alerts to Slack and Zendesk for incident handling.

Siemens Gridscale X Prepay has username-enumeration and account-lock bypass flaws that can allow continued access after lock.

ONES enhances enterprise SONiC security with mutual TLS, RBAC, LDAP, continuous scans, and telemetry monitoring for compliance.

RedTiger, an open-source red-teaming tool, is circulating with infostealer variants targeting Discord accounts and gaming credentials.

Promotion of enterprise security is underscored in a guide focusing on ONES, which enhances SONiC deployments through a layered security approach.

Over 500 npm packages compromised in a recent supply chain attack involving credential theft and malware propagation per Socket.

Netskope found a new Python RAT using Telegram Bot API for C2 operations, targeting gamers via deceptive installation methods.

Malware authors leveraged a known gaming client for subterfuge while employing robust surveillance and adware functionalities.

NPM supply chain compromise revealed on Sept. 15, 2025, impacts over 500 packages with malware Shai-Hulud and credential theft.

Netskope identifies a new Python RAT that uses Telegram for command and control, targeting gamers and exfiltrating data.

MinKNOW software from Oxford Nanopore Technologies shows multiple vulnerabilities, impacting data security and sequencing processes.