NetmanageIT CTO Corner

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco warns of max severity ISE zero-day exploited in attacks

BleepingComputer

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

Anthropic wants Claude to analyze your bank account and financial data

Anthropic wants Claude to analyze your bank account and financial data

BleepingComputer

Illustration of GhostContainer activity moving from a Microsoft Exchange server through RDP tunnels toward an Active Directory environment

Ai Threat Intel Analysis

NightEagle’s GhostContainer Campaign Targets Russian Businesses

Kaspersky details NightEagle’s use of GhostContainer, Exchange servers, tunneling tools, RDP weaknesses, and Active Directory abuse.

Windows 11 KB5124008 update breaks domain trust for some users

Windows 11 KB5124008 update breaks domain trust for some users

BleepingComputer

Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

BleepingComputer

Malware bypasses browser checks to force install Chrome, Edge extensions

Malware bypasses browser checks to force install Chrome, Edge extensions

BleepingComputer

Spain's data agency gets first report of AI-powered data breach

Spain's data agency gets first report of AI-powered data breach

BleepingComputer

Spain reports first alleged AI-powered data theft attack

Spain reports first alleged AI-powered data theft attack

BleepingComputer

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

The true cost of a ransomware attack, with and without BCDR

The true cost of a ransomware attack, with and without BCDR

BleepingComputer

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Microsoft says Copilot buttons still missing in classic Outlook

Microsoft says Copilot buttons still missing in classic Outlook

BleepingComputer

Webinar: What happens in the first hours of a Google Workspace breach

Webinar: What happens in the first hours of a Google Workspace breach

BleepingComputer

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

Threat Intelligence Alone Won't Close the Exploitation Gap

Threat Intelligence Alone Won't Close the Exploitation Gap

Critical ScreenConnect flaw now actively exploited in attacks

Critical ScreenConnect flaw now actively exploited in attacks

BleepingComputer

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks