NetmanageIT CTO Corner

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Illustration of AI-assisted intrusion activity using batch scripts, SOCKS5 relays and exposed staging infrastructure

Ai Threat Intel Analysis

AI-Enabled Intrusions Target Latin American Organizations

Unit 42 details two Latin American intrusion clusters using LLM-assisted workflows, SOCKS5 tooling, data theft, and exposed infrastructure.

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

BleepingComputer

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

BleepingComputer

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Illustration of Windows backdoors using WinRM delivery and MQTT and Matrix channels for command and control

Ai Threat Intel Analysis

Toy Ghouls Deploys Windows Backdoors Over MQTT and Matrix

Kaspersky details Toy Ghouls backdoors that use HiveMQ MQTT and Matrix-based Element for Windows persistence, telemetry, and command execution.

IDScan sued over alleged data breach affecting 153 million drivers

IDScan sued over alleged data breach affecting 153 million drivers

BleepingComputer

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Critical Citrix NetScaler auth bypass now leveraged in attacks

Critical Citrix NetScaler auth bypass now leveraged in attacks

BleepingComputer

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

Microsoft says some users can’t open the Teams desktop client

Microsoft says some users can’t open the Teams desktop client

BleepingComputer

39 New Methods That Compromise Passkey Authentication

39 New Methods That Compromise Passkey Authentication

BleepingComputer

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

BleepingComputer

Exchange Online outage causes email delays, 'Server busy' errors

Exchange Online outage causes email delays, 'Server busy' errors

BleepingComputer

Google warns of new Chrome zero-day flaw exploited in attacks

Google warns of new Chrome zero-day flaw exploited in attacks

BleepingComputer

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws