Botnet Malware Exploits 13,000 MikroTik Devices By Abusing Misconfigured DNS Records
16
Jan
2025

Botnet Malware Exploits 13,000 MikroTik Devices By Abusing Misconfigured DNS Records

Cybersecurity experts at Infoblox Threat Intel have uncovered a sophisticated botnet leveraging misconfigured DNS records to bypass email protection systems…

Veeam Azure Backup Vulnerability Allows Attackers to Utilize SSRF & Send Unauthorized Requests
16
Jan
2025

Veeam Azure Backup Vulnerability Allows Attackers to Utilize SSRF & Send Unauthorized Requests

A critical vulnerability has been identified in Veeam Backup for Microsoft Azure, specifically referenced as CVE-2025-23082. Discovered during internal testing,…

Webinar: Amplifying SIEM with AI-driven NDR for IT/OT convergence
16
Jan
2025

Webinar: Amplifying SIEM with AI-driven NDR for IT/OT convergence

Join cybersecurity leader Erwin Eimers from Sumitomo Chemicals Americas to explore how AI-driven Network Detection and Response (NDR) enhances SIEM…

Ivanti Endpoint Manager
16
Jan
2025

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

Jan 16, 2025Ravie LakshmananVulnerability / Endpoint Security Ivanti has rolled out security updates to address several security flaws impacting Avalanche,…

EU Action Plan To Secure Healthcare From Cyber Threats
16
Jan
2025

EU Action Plan To Secure Healthcare From Cyber Threats

The European Commission has rolled out a comprehensive plan to fortify the cybersecurity of hospitals and healthcare providers across the…

2024 CVE Review - "Critical, High, Medium" Position Shifting in Cybersecurity
16
Jan
2025

2024 CVE Review – “Critical, High, Medium” Position Shifting in Cybersecurity

As the calendar turns to 2025, cybersecurity professionals are taking stock of key trends in Common Vulnerabilities and Exposures (CVEs)…

W3 Total Cache Plugin Vulnerability Let Attackers Gain Unauthorized Access to Sensitive Data
16
Jan
2025

W3 Total Cache Plugin Vulnerability Let Attackers Gain Unauthorized Access to Sensitive Data

A significant security vulnerability has been identified in the W3 Total Cache plugin for WordPress, affecting all versions up to…

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws
16
Jan
2025

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Jan 16, 2025Ravie LakshmananEndpoint Security / Ransomware Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a…

0-Click RCE Vulnerability in Samsung Smartphones Let Attackers Trigger OOB Write - Technical Analysis
16
Jan
2025

0-Click RCE Vulnerability in Samsung Smartphones Let Attackers Trigger OOB Write – Technical Analysis

Google Security researchers have disclosed a critical vulnerability, tagged as CVE-2024-49415, affecting Samsung smartphones last year and reported to Samsung…

New CISA-Microsoft Playbook Enhances Cyber Threat Detection
16
Jan
2025

New CISA-Microsoft Playbook Enhances Cyber Threat Detection

The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Office of Management and Budget (OMB), the Office of…

Microsoft Patches Outlook Zero-Click RCE Exploited Via Email
16
Jan
2025

Microsoft Patches Outlook Zero-Click RCE Exploited Via Email

Microsoft issued a critical security patch addressing a newly discovered vulnerability in Outlook, designated as CVE-2025-21298. This flaw, characterized as…

CISA Released Guide to Microsoft Expanded Cloud Playbook
16
Jan
2025

CISA Released Guide to Microsoft Expanded Cloud Playbook

The Cybersecurity and Infrastructure Security Agency (CISA) has released the “Microsoft Expanded Cloud Logs Implementation Playbook.” This guide is geared…