Security News - NetmanageIT CTO Corner

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

CISA: Windows Task Host flaw now exploited by ransomware gangs

CISA: Windows Task Host flaw now exploited by ransomware gangs

BleepingComputer

Microsoft confirms outage affecting search in Microsoft 365 apps

Microsoft confirms outage affecting search in Microsoft 365 apps

BleepingComputer

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

Microsoft starts removing WMIC tool used by cybercriminals

Microsoft starts removing WMIC tool used by cybercriminals

BleepingComputer

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Hacker claims 3.6 million Azure account records stolen from major companies

Hacker claims 3.6 million Azure account records stolen from major companies

BleepingComputer

Pokémon Center data breach exposes customer info, cancels some orders

Pokémon Center data breach exposes customer info, cancels some orders

BleepingComputer

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Microsoft confirms GitHub is down worldwide

Microsoft confirms GitHub is down worldwide

BleepingComputer

Certighost and the Privilege Hiding in Your Certificate Authority

Certighost and the Privilege Hiding in Your Certificate Authority

BleepingComputer

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Windows Server 2022 reaches end of mainstream support in 60 days

Windows Server 2022 reaches end of mainstream support in 60 days

BleepingComputer

How MCP Servers Can Expose Enterprise Secrets

How MCP Servers Can Expose Enterprise Secrets

Philips and GE investigating Clop ransomware data theft claims

Philips and GE investigating Clop ransomware data theft claims

BleepingComputer

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

French tax authority data breach affects 678,000 individuals

French tax authority data breach affects 678,000 individuals

BleepingComputer

Why Your AI Developer Tools Might Be Your Biggest Security Risk

Why Your AI Developer Tools Might Be Your Biggest Security Risk

The Long Road From Pentest Finding to Verified Fix

The Long Road From Pentest Finding to Verified Fix

Identity Governance Wasn't Built for Breaches That Happen in Hours

Identity Governance Wasn't Built for Breaches That Happen in Hours

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Microsoft working on Defender patch for ShieldBreak zero-day

Microsoft working on Defender patch for ShieldBreak zero-day

BleepingComputer

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware