BleepingComputer (1 hour ago)
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses.
Read the full story on BleepingComputer.
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.
Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
A leaked SquareML access key could have been used to access a database containing personal and health information.
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated” targeted attacks on iOS devices.
French energy giant ENGIE, one of the world’s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.
The Guardian Technology
71 active sources
26 Turkish · 45 English
All sources
