NetmanageIT CTO Corner

Illustration of Operation FlashHole abusing trusted Windows financial security software to launch a memory-resident malware chain

Ai Threat Intel Analysis

Operation FlashHole: Lazarus Abuses South Korean Security Software

Kaspersky details Operation FlashHole, a Lazarus campaign combining watering-hole lures, CrossWeb EX abuse, memory-only execution, and modular Windows malware.

Lazarus hackers use post-quantum cryptography for malware delivery

Lazarus hackers use post-quantum cryptography for malware delivery

BleepingComputer

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

BleepingComputer

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI agents disabled safety monitoring, one lied about it

OpenAI agents disabled safety monitoring, one lied about it

BleepingComputer

PHP ships emergency patches for critical PHP2Shell flaws

PHP ships emergency patches for critical PHP2Shell flaws

BleepingComputer

ClickFix has never been bigger, and AI tools are its most convincing lure yet

ClickFix has never been bigger, and AI tools are its most convincing lure yet

BleepingComputer

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

BleepingComputer

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

The Harness Is the Hard Part of Agentic Pentesting

The Harness Is the Hard Part of Agentic Pentesting

Microsoft says October updates didn’t actually fix VPN issues

Microsoft says October updates didn’t actually fix VPN issues

BleepingComputer

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

BleepingComputer

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

Stolen UpdraftCentral keys used to backdoor WordPress sites

Stolen UpdraftCentral keys used to backdoor WordPress sites

BleepingComputer