Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis warns of actively exploited flaw in its cPanel backup plugin

BleepingComputer

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

BleepingComputer

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

CenterPoint Energy confirms customer data stolen in cyberattack

CenterPoint Energy confirms customer data stolen in cyberattack

BleepingComputer

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

BambooToken malware controls Windows and Linux systems via MQTT

BambooToken malware controls Windows and Linux systems via MQTT

BleepingComputer

Hackers target WordPress sites via third-party WooCommerce plugin

Hackers target WordPress sites via third-party WooCommerce plugin

BleepingComputer

What Zero-Day Response Should Be in the Post-Mythos Era

What Zero-Day Response Should Be in the Post-Mythos Era

BleepingComputer

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

BleepingComputer

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Suspected Black Axe gang leaders face cybercrime charges in the US

Suspected Black Axe gang leaders face cybercrime charges in the US

BleepingComputer

Microsoft confirms KB5002914 Excel update breaks copy and paste

Microsoft confirms KB5002914 Excel update breaks copy and paste

BleepingComputer

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco patches Secure Email Gateway zero-day exploited in attacks

BleepingComputer

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft releases emergency Windows updates to fix RDS failures

BleepingComputer

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

BleepingComputer

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew 7.0.0 gets built-in GUI, better security controls

BleepingComputer

Twitch extension with 30K installs exposes users’ OAuth tokens

Twitch extension with 30K installs exposes users’ OAuth tokens

BleepingComputer

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

BleepingComputer