Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

What Zero-Day Response Should Be in the Post-Mythos Era

What Zero-Day Response Should Be in the Post-Mythos Era

BleepingComputer

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

BleepingComputer

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Suspected Black Axe gang leaders face cybercrime charges in the US

Suspected Black Axe gang leaders face cybercrime charges in the US

BleepingComputer

Microsoft confirms KB5002914 Excel update breaks copy and paste

Microsoft confirms KB5002914 Excel update breaks copy and paste

BleepingComputer

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco patches Secure Email Gateway zero-day exploited in attacks

BleepingComputer

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft releases emergency Windows updates to fix RDS failures

BleepingComputer

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

BleepingComputer

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew 7.0.0 gets built-in GUI, better security controls

BleepingComputer

Twitch extension with 30K installs exposes users’ OAuth tokens

Twitch extension with 30K installs exposes users’ OAuth tokens

BleepingComputer

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

BleepingComputer

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

BleepingComputer

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

Why Patch Automation Needs Brakes, Not Just an Accelerator

Why Patch Automation Needs Brakes, Not Just an Accelerator

BleepingComputer

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

BleepingComputer