whoAMI attack could allow remote code execution within AWS account
whoAMI attack could allow remote code execution within AWS account Pierluigi Paganini February 17, 2025 Researchers warn that the whoAMI attack lets attackers publish an…
Category: Securityaffairs
Storm-2372 used the device code phishing technique since August 2024
Storm-2372 used the device code phishing technique since August 2024 Pierluigi Paganini February 16, 2025 Russia-linked group Storm-2372 used the device code phishing technique since…
U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February 15, 2025 U.S. Cybersecurity…
Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug
Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug Pierluigi Paganini February 15, 2025 Threat actors are exploiting a recently disclosed vulnerability, tracked as…
U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February 14, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SimpleHelp vulnerability…
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flaws
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flaws Pierluigi Paganini February 14, 2025 China-linked APT Salt Typhoon has breached more U.S. telecommunications…
Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks
Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks Pierluigi Paganini February 14, 2025 Threat actors are exploiting a zero-day SQL injection vulnerability…
Valve removed the game PirateFi from the Steam video game platform because contained a malware
Valve removed the game PirateFi from the Steam video game platform because contained a malware Pierluigi Paganini February 14, 2025 Valve removed a game from…
UAV and C-UAV Technologies as Targets
The Rise of Cyber Espionage: UAV and C-UAV Technologies as Targets Pierluigi Paganini February 13, 2025 Researchers at cybersecurity firm Resecurity detected a rise in…
China-linked APTs’ tool employed in RA World Ransomware attack
China-linked APTs’ tool employed in RA World Ransomware attack Pierluigi Paganini February 13, 2025 A November 2024 RA World ransomware attack on an Asian software…
Russia-linked APT Seashell Blizzard is behind the long-running global access operation BadPilot campaign
Russia-linked APT Seashell Blizzard is behind the long running global access operation BadPilot campaign Pierluigi Paganini February 13, 2025 A subgroup of the Russia-linked Seashell…
Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron
Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron Pierluigi Paganini February 13, 2025 The Sarcoma ransomware group announced a breach…