NetmanageIT CTO Corner

Critical Avada WordPress theme flaw enables zero-click RCE

Critical Avada WordPress theme flaw enables zero-click RCE

BleepingComputer

New GPUThor attack defeats NVIDIA ECC protection for root access

New GPUThor attack defeats NVIDIA ECC protection for root access

BleepingComputer

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

Meta agrees to $18 billion settlement over teen social media harms

Meta agrees to $18 billion settlement over teen social media harms

BleepingComputer

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Boston Scientific says cyberattack disrupted operations globally

Boston Scientific says cyberattack disrupted operations globally

BleepingComputer

Hackers target Microsoft SharePoint RCE chain with PoC exploit

Hackers target Microsoft SharePoint RCE chain with PoC exploit

BleepingComputer

FBI disrupts proxy network enabling Chinese espionage operations

FBI disrupts proxy network enabling Chinese espionage operations

BleepingComputer

Snowflake ends service-account passwords. Now comes the hard part

Snowflake ends service-account passwords. Now comes the hard part

BleepingComputer

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Ubiquiti patches three max severity security vulnerabilities

Ubiquiti patches three max severity security vulnerabilities

BleepingComputer

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Microsoft tests new privacy controls for Windows 11 desktop apps

Microsoft tests new privacy controls for Windows 11 desktop apps

BleepingComputer

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

Hackers now exploit critical Gitea flaw in code injection attacks

Hackers now exploit critical Gitea flaw in code injection attacks

BleepingComputer

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

LACMA data breach last year exposed social security and medical data

LACMA data breach last year exposed social security and medical data

BleepingComputer

Hackers abuse npm mirrors to host phishing redirect pages

Hackers abuse npm mirrors to host phishing redirect pages

BleepingComputer

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

BleepingComputer