Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Nearly 800,000 Telnet servers exposed to remote attacks

Internet security watchdog Shadowserver tracks nearly 800,000 IP addresses with Telnet fingerprints amid ongoing attacks exploiting a critical authentication bypass vulnerability in the GNU InetUtils telnetd server.

The security flaw (CVE-2026–24061) impacts GNU InetUtils versions 1.9.3 (released 11 years ago in 2015) through 2.7 and was patched in version 2.8 (released on January 20).

“The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter,” explained open-source contributor Simon Josefsson, who reported it.

6 Okta security settings you might have overlooked

What worked six months ago may no longer be sufficient to protect against today’s threats.

This article outlines six fundamental Okta security best practices that form the backbone of a resilient identity security program.

Beyond implementing these settings, continuous security posture monitoring for Okta (and the rest of your SaaS ecosystem) with a tool like Nudge Security can help you stay ahead of emerging threats and maintain a robust security posture as your environment grows and changes.

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

The defense mechanisms that NPM introduced after the ‘Shai-Hulud’ supply-chain attacks have weaknesses that allow threat actors to bypass them via Git dependencies.

Collectively called PackageGate, the vulnerabilities were discovered in multiple utilities in the JavaScript ecosystem that allow managing dependencies, like pnpm, vlt, Bun, and NPM.

Researchers at endpoint and supply-chain security company Koi discovered the issues and reported them to the vendors. They say that the problems were addressed in all tools except for NPM, who closed the report stating that the behavior “works as expected.”

CISA says critical VMware RCE flaw now actively exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical VMware vCenter Server vulnerability as actively exploited and ordered federal agencies to secure their servers within three weeks.

Patched in June 2024, this security flaw (CVE-2024–37079) stems from a heap overflow weakness in the DCERPC protocol implementation of vCenter Server (a Broadcom VMware vSphere management platform that helps admins manage ESXi hosts and virtual machines).

Threat actors with network access to vCenter Server may exploit this vulnerability by sending a specially crafted network packet that can trigger remote code execution in low-complexity attacks that don’t require privileges on the targeted systems or user interaction.

An ultrastructural map of a spinal sensorimotor circuit reveals the potential of astroglia modulation

Using cell reconstructions and synapse mapping in zebrafish, Koh and Avalos Arceo et. al. reveal a vertebrate local spinal sensorimotor circuit map, revealing how neurons and glia are structurally positioned in a circuit. This resource provides insight into how glia and synaptic thresholding could modulate information flow through complex neural networks.

Led Team Discovers Metallic Material With Record Thermal Conductivity

A UCLA-led, multi-institution research team has discovered a metallic material with the highest thermal conductivity measured among metals, challenging long-standing assumptions about the limits of heat transport in metallic materials.

Published this week in Science, the study is led by Yongjie Hu, a professor of mechanical and aerospace engineering at the UCLA Samueli School of Engineering. The team reported that metallic theta-phase tantalum nitride conducts heat nearly three times more efficiently than copper or silver, the best conventional heat-conducting metals.

Thermal conductivity describes how efficiently a material can carry heat. Materials with high thermal conductivity are essential for removing localized hot spots in electronic devices, where overheating limits performance, reliability and energy efficiency. Copper currently dominates the global heat-sink market, accounting for roughly 30% of commercial thermal-management materials, with a thermal conductivity of about 400 watts per meter-kelvin.

Researchers Discover Intensive Meditation Retreat Rewires the Brain and Blood in Just 7 Days

A one-week mind-body retreat led to consistent changes in the brain and at the molecular level that were associated with greater resilience, reduced pain, and improved recovery from stress. Researchers at the University of California, San Diego report that a short, intensive retreat combining sev

/* */