Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 8 months, 1 week ago

Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials

Cloud security company Wiz has revealed that it uncovered in-the-wild exploitation of a security flaw in a Linux utility called Pandoc as part of attacks designed to infiltrate Amazon Web Services (AWS) Instance Metadata Service (IMDS)

More from The Hacker News 24 Sep 2025, 7:15 p.m. CVE-2025-51591 Amazon Amazon Web Services CVE Cloud Credentials Exploit Flaw Identity and Access Management Linux Theft Vulnerability

Bleeping Computer 2 years, 6 months ago

Hackers exploit Looney Tunables Linux bug, steal cloud creds

The operators of the Kinsing malware are targeting cloud environments with systems vulnerable to "Looney Tunables," a Linux security issue identified as CVE-2023-4911 that allows a local attacker to gain root privileges on the system. [...]

More from Bleeping Computer 7 Nov 2023, 9:26 a.m. Actively exploited CVE-2023-4911 CVE Cloud Exploit Linux Malware Root Theft Vulnerability

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials

Hackers exploit Looney Tunables Linux bug, steal cloud creds