NetmanageIT CTO Corner

Malicious sites use JavaScript to build malware in browser memory

Malicious sites use JavaScript to build malware in browser memory

BleepingComputer

ShinyHunters data leaks fuel $2,000 sextortion email scam

ShinyHunters data leaks fuel $2,000 sextortion email scam

BleepingComputer

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

OpenAI confirms ChatGPT is down worldwide

BleepingComputer

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

OnTrac notifies customers of data breach after network hack

OnTrac notifies customers of data breach after network hack

BleepingComputer

Hermes AI agent used to automate attack on Thai Finance Ministry

Hermes AI agent used to automate attack on Thai Finance Ministry

BleepingComputer

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

BleepingComputer

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft blames massive Microsoft 365 outage on maintenance bug

BleepingComputer

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Chick-fil-A data breach affects more than 13,000 customers

Chick-fil-A data breach affects more than 13,000 customers

BleepingComputer

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

BleepingComputer

Europol flags 4,340 URLs for removal in 'The Com' crackdown

Europol flags 4,340 URLs for removal in 'The Com' crackdown

BleepingComputer

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Man gets six years for hacking 750 women's Snapchat accounts

Man gets six years for hacking 750 women's Snapchat accounts

BleepingComputer

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Clop ransomware targets Windchill, FlexPLM in data theft attacks

BleepingComputer