China-linked APT group Winnti targets Japanese organizations since March 2024 Pierluigi Paganini February 18, 2025 China-linked threat actor Winnti targeted Japanese companies in the manufacturing,…
Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers Pierluigi Paganini February 18, 2025 Xerox VersaLink C7025 Multifunction printer flaws…
New XCSSET macOS malware variant used in limited attacks Pierluigi Paganini February 18, 2025 Microsoft discovered a new variant of the Apple macOS malware XCSSET that was…
Dutch Police shut down bulletproof hosting provider Zservers and seized 127 servers Pierluigi Paganini February 17, 2025 Dutch police seized 127 servers of the bulletproof…
New Golang-based backdoor relies on Telegram for C2 communication Pierluigi Paganini February 17, 2025 Netskope Threat Labs researchers discovered a Golang-based backdoor using Telegram for…
whoAMI attack could allow remote code execution within AWS account Pierluigi Paganini February 17, 2025 Researchers warn that the whoAMI attack lets attackers publish an…
Storm-2372 used the device code phishing technique since August 2024 Pierluigi Paganini February 16, 2025 Russia-linked group Storm-2372 used the device code phishing technique since…
U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February 15, 2025 U.S. Cybersecurity…
Attackers exploit recently disclosed Palo Alto Networks PAN-OS firewalls bug Pierluigi Paganini February 15, 2025 Threat actors are exploiting a recently disclosed vulnerability, tracked as…
U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February 14, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SimpleHelp vulnerability…
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flaws Pierluigi Paganini February 14, 2025 China-linked APT Salt Typhoon has breached more U.S. telecommunications…
Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks Pierluigi Paganini February 14, 2025 Threat actors are exploiting a zero-day SQL injection vulnerability…
