SecurityWeek (1 hour ago)
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.
Read the full story on SecurityWeek.
Sales from EU HQ’d vendor rocket in two years. The Trump affect? Yes but NIS2 and DORA are factors too
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.
Some hunt for bargains, and others for sensitive customer data, new report warns.
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems.
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
65 active sources
20 Turkish · 45 English
All sources
