NetmanageIT CTO Corner

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

Trivy supply-chain attack spreads to Docker, GitHub repos

Trivy supply-chain attack spreads to Docker, GitHub repos

BleepingComputer

Varonis Atlas: Securing AI and the Data That Powers It

Varonis Atlas: Securing AI and the Data That Powers It

BleepingComputer

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

Microsoft Exchange Online service change causes email access issues

Microsoft Exchange Online service change causes email access issues

BleepingComputer

We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them

We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them

Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware

Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware

FBI warns of Handala hackers using Telegram in malware attacks

FBI warns of Handala hackers using Telegram in malware attacks

BleepingComputer

Telegram's Crackdown Changed How Threat Actors Act, But Not Where They Act

Telegram's Crackdown Changed How Threat Actors Act, But Not Where They Act

Why Institutions of Higher Education Face Unique Identity Security and Management Risk

Why Institutions of Higher Education Face Unique Identity Security and Management Risk

CISA orders feds to patch DarkSword iOS flaws exploited attacks

CISA orders feds to patch DarkSword iOS flaws exploited attacks

BleepingComputer

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

New KB5085516 emergency update fixes Microsoft account sign-in

New KB5085516 emergency update fixes Microsoft account sign-in

BleepingComputer

Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems

Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems

VoidStealer malware steals Chrome master key via debugger trick

VoidStealer malware steals Chrome master key via debugger trick

BleepingComputer

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

BleepingComputer

Google adds ‘Advanced Flow’ for safe APK sideloading on Android

Google adds ‘Advanced Flow’ for safe APK sideloading on Android

BleepingComputer

Microsoft Azure Monitor alerts abused in callback phishing campaigns

Microsoft Azure Monitor alerts abused in callback phishing campaigns

BleepingComputer

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

FBI links Signal phishing attacks to Russian intelligence services

FBI links Signal phishing attacks to Russian intelligence services

BleepingComputer

Oracle pushes emergency fix for critical Identity Manager RCE flaw

Oracle pushes emergency fix for critical Identity Manager RCE flaw

BleepingComputer

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets