SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks Pierluigi Paganini March 14, 2025 Operators behind the SuperBlack ransomware exploited two vulnerabilities in Fortinet…
U.S. CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 14, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
GitLab addressed critical auth bypass flaws in CE and EE Pierluigi Paganini March 13, 2025 GitLab addressed two critical authentication bypass vulnerabilities in Community Edition…
Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities Pierluigi Paganini March 13, 2025 Researchers warn of a “coordinated surge” in…
North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy Pierluigi Paganini March 13, 2025 North Korea-linked APT group ScarCruft used a new Android…
Meta warns of actively exploited flaw in FreeType library Pierluigi Paganini March 13, 2025 Meta warned that a vulnerability, tracked as CVE-2025-27363, impacting the FreeType library may…
Medusa ransomware hit over 300 critical infrastructure organizations until February 2025 Pierluigi Paganini March 13, 2025 The Medusa ransomware operation hit over 300 organizations in…
China-linked APT UNC3886 targets EoL Juniper routers Pierluigi Paganini March 12, 2025 Mandiant researchers warn that China-linked actors are deploying custom backdoors on Juniper Networks Junos…
U.S. CISA adds six Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 12, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days Pierluigi Paganini March 12, 2025 Microsoft Patch Tuesday security updates for March…
New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job? Pierluigi Paganini March 12, 2025 The Ballista botnet is exploiting an unpatched TP-Link…
Switzerland’s NCSC requires cyberattack reporting for critical infrastructure within 24 hours Pierluigi Paganini March 11, 2025 Switzerland’s NCSC mandates critical infrastructure organizations to report cyberattacks…
