Zero-Day Exploits, GitHub Actions Supply Chain Attacks, and OTP Auth Flaws

Zero-Day Exploits, GitHub Actions Supply Chain Attacks, and OTP Auth Flaws

Today's Highlights

This week's top security news features a critical zero-day actively exploited in KnowledgeDeliver LMS and widespread supply chain cache poisoning targeting open-source projects via GitHub Actions. Additionally, a detailed analysis reveals an OTP rate-limit bypass technique enabling account takeovers through leaked validity signals.

KnowledgeDeliver flaw exploited as a zero-day to install web shells (r/cybersecurity)

Source: https://reddit.com/r/cybersecurity/comments/1tojdsq/knowledgedeliver_flaw_exploited_as_a_zeroday_to/