The Hacker News (1 hour ago)
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with an aim to surreptitiously collect emails.
Read the full story on The Hacker News.
France calls attack ‘an unprecedented campaign in terms of its scale and level of aggressiveness’
Any net-connected vehicle from two automakers could be remotely opened and started — now-patched failures with API backend security showcase a lack of 101-level best practices
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined.
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.
The Russian state-backed threat group Turla has been using a new malicious toolset called ‘Cereal’ to intercept emails on Microsoft Exchange servers at government organizations.
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score.
An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran’s Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday.
Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision.
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild.
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell.
65 active sources
20 Turkish · 45 English
All sources
