Threat Actors Allegedly Listed Veeam RCE Exploit for Sale on Dark Web
Veeam Backup & Replication, a cornerstone of many enterprises’ data protection strategy, has reportedly become the focus of a new exploit being offered on a…
Month: September 2025
New Android Banking Trojan Uses Hidden VNC for Full Remote Control of Devices
In late August 2025, Cleafy’s Threat Intelligence team uncovered Klopatra, a new, highly sophisticated Android banking trojan and Remote Access Trojan (RAT) that grants attackers…
Tile trackers plagued by weak security, researchers warn
Researchers at the Georgia Institute of Technology scrutinized the security of the popular Tile tracker and came out disappointed. Bluetooth trackers are a steadily growing…
Infinidat doubles all-flash array capacity in Infinibox SSA G4 F24
Infinidat has expanded its Infinibox family to double the capacity of its biggest all-flash array while cutting its physical footprint. The move will see the…
Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results
Several weaknesses patched recently by Google in Gemini could have allowed attackers to trick the AI assistant into helping them achieve data theft and other…
When Audits Fail: Four Critical Pre-Auth Vulnerabilities in TRUfusion Enterprise
In early 2025, we encountered a mission-critical software component called TRUfusion Enterprise on the perimeter of one of our customers that is used to transfer…
Cisco firewall flaws endanger nearly 50,000 devices worldwide
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. Nearly 50,000 Cisco firewall devices with recently…
Microsoft fixes Windows DRM video playback issues for some users
Microsoft says it has “partially” resolved a known issue that caused problems when trying to play DRM-protected video in Blu-ray/DVD/Digital TV applications. This bug affects…
Google Gemini Vulnerabilities Let Attackers Exfiltrate User’s Saved Data and Location
Three new vulnerabilities in Google’s Gemini AI assistant suite could have allowed attackers to exfiltrate users’ saved information and location data. The vulnerabilities uncovered by…
Hackers Use Cellular Router API to Send Malicious SMS with Weaponized Links
The monitoring and analysis of vulnerability exploitations are among the primary responsibilities of Sekoia.io’s Threat Detection & Research (TDR) team. Using honeypots, the team monitors…
US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
A massive collection of data belonging to customers of ClaimPix, an Illinois-based platform for managing auto insurance claims across the United States, was recently discovered…
CISA says it will fill the gap as some federal funding for MS-ISAC dries up
The cooperative agreement between the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the not-for-profit Center for Internet Security is ending today, the agency has…