https://blog.dansec.red/cves/cve-2025-3248/Recent content in CVE-2025-3248 on DanSec DailyHugoen-gbSun, 13 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-13-cybersecurity-news/Sun, 13 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-13-cybersecurity-news/<h2 id="newly-discovered-vulnerabilities-and-exploits">Newly Discovered Vulnerabilities and Exploits</h2> <ul> <li>Langflow AI vulnerability (CVE-2025-3248) exploited after recent release of version 1.3.0, with significant impact on security.</li> </ul> <h2 id="phishing-attacks-and-tools">Phishing Attacks and Tools</h2> <ul> <li>Tycoon2FA phishing kit updated to target Microsoft 365 with improved stealth and evasion capabilities.</li> </ul> <h2 id="supply-chain-risks">Supply Chain Risks</h2> <ul> <li>&lsquo;Slopsquatting&rsquo; emerges as a new supply chain risk due to AI-generated code dependencies hallucinating non-existent package names.</li> </ul> <h2 id="policy-and-regulatory-developments">Policy and Regulatory Developments</h2> <ul> <li>Department of Homeland Security email mistakenly instructs US citizens on temporary legal status to self-deport, leading to confusion and concerns.</li> </ul> <h2 id="international-cyber-threats">International Cyber Threats</h2> <ul> <li>China indirectly admits to hacking US infrastructure, raising concerns about cybersecurity and potential impacts on critical infrastructure.</li> </ul> <h2 id="industry-updates">Industry Updates</h2> <ul> <li>OpenAI set to release GPT-4.1 as a successor to GPT-4.0, impacting the artificial intelligence and cybersecurity industry.</li> </ul>