Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Check Point warns of Management Server zero-day exploited in attacks

Check Point warns of Management Server zero-day exploited in attacks

BleepingComputer

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

BleepingComputer

Webinar tomorrow: Inside real-world Google Workspace breaches

Webinar tomorrow: Inside real-world Google Workspace breaches

BleepingComputer

D-Link warns of max severity zero-day bug in DIR-822A routers

D-Link warns of max severity zero-day bug in DIR-822A routers

BleepingComputer

AI Agents Are Rewriting the Rules of Lateral Movement

AI Agents Are Rewriting the Rules of Lateral Movement

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

DORA Year Two: Can Your SOC Actually See the Attack?

DORA Year Two: Can Your SOC Actually See the Attack?

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

New Windows Defender zero-day blocks Microsoft antivirus updates

New Windows Defender zero-day blocks Microsoft antivirus updates

BleepingComputer

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

CISA orders feds to patch Zyxel flaw exploited for data theft

CISA orders feds to patch Zyxel flaw exploited for data theft

BleepingComputer

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

BigCommerce alerts merchants of data breach linked to Ribon apps

BigCommerce alerts merchants of data breach linked to Ribon apps

BleepingComputer

CISA alerts of active exploitation of three Linux kernel flaws

CISA alerts of active exploitation of three Linux kernel flaws

BleepingComputer

WordPress Click2Shell flaw lets hackers execute PHP on the server

WordPress Click2Shell flaw lets hackers execute PHP on the server

BleepingComputer

Microsoft to retire Microsoft 365 Companion apps in December

Microsoft to retire Microsoft 365 Companion apps in December

BleepingComputer

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto

Google Fined €403 Million Over GDPR Violations Tied to Location Data

Google Fined €403 Million Over GDPR Violations Tied to Location Data