NetmanageIT CTO Corner

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Illustration of PHP web servers being exploited and connected to an Active Directory environment

Ai Threat Intel Analysis

PHP2Shell: Critical PHP Flaws Put Web Servers at Risk

Unit 42 details two critical PHP RCE vulnerabilities, observed post-exploitation activity, exposure priorities and practical detection guidance.

Abandoned Popcorn Time app exposed millions of device to RCE attacks

Abandoned Popcorn Time app exposed millions of device to RCE attacks

BleepingComputer

Microsoft Teams to get AI-powered, context-aware phishing detection

Microsoft Teams to get AI-powered, context-aware phishing detection

BleepingComputer

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Microsoft: Windows Server 2016 reaches end of support in January

Microsoft: Windows Server 2016 reaches end of support in January

BleepingComputer

Quest Diagnostics confirms data breach exposed patient records

Quest Diagnostics confirms data breach exposed patient records

BleepingComputer

PHP shares mitigation for new RCE vulnerability with no patch

PHP shares mitigation for new RCE vulnerability with no patch

BleepingComputer

You gave your AI agent access, but who is giving it orders?

You gave your AI agent access, but who is giving it orders?

BleepingComputer

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

HPE patches eight max severity RCE and auth bypass AOS flaws

HPE patches eight max severity RCE and auth bypass AOS flaws

BleepingComputer

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Railway warns devs to rotate secrets after potential breach

Railway warns devs to rotate secrets after potential breach

BleepingComputer

Conceptual illustration of a UEFI bootkit loading before Windows on a diplomatic organization workstation while defenders inspect Secure Boot and cloud-storage activity

Ai Threat Intel Analysis

BlackX UEFI Bootkit Targets Central Asian Diplomats

Kaspersky researchers describe BlackX, a BlackLotus-like UEFI bootkit attributed with medium confidence to APT41 and used against diplomatic organizations.

Capcom confirms data breach affecting 11.7 million accounts

Capcom confirms data breach affecting 11.7 million accounts

BleepingComputer

LiteLLM release pipeline hacked to distribute info-stealer malware

LiteLLM release pipeline hacked to distribute info-stealer malware

BleepingComputer

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable