CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances

8 months ago

About 900 Sangoma FreePBX systems were infected with web shells after attackers exploited a command injection flaw. Hundreds of Sangoma…

Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION

8 months ago

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs…

Canadian Tire 2025 data breach impacts 38 million users

8 months ago

A data breach at Canadian Tire exposed personal data from over 38 million accounts, including contact details and encrypted passwords.…

Iran ’s Internet near-totally blacked out amid US, Israeli strikes

8 months ago

Iran experienced a near-total internet blackout as Israel and the U.S. launched strikes, according to NetBlocks. Internet access across Iran…

Microsoft warns of RAT delivered through trojanized gaming utilities

8 months ago

Attackers spread trojanized gaming tools to deliver a stealthy RAT using PowerShell, LOLBins, and Defender evasion tactics. Threat actors are…

Aeternum botnet hides commands in Polygon smart contracts

8 months ago

Aeternum botnet uses Polygon blockchain smart contracts for C&C, making its infrastructure harder to detect and disrupt. Qrator Labs researchers…

<gwmw style="display: none; background-color: transparent;"></gwmw>iPhone and iPad are the first consumer devices cleared for NATO ‘RESTRICTED’ classification<gwmw style="display: none; background-color: transparent;"></gwmw>

8 months ago

Apple’s iPhone and iPad are now NATO-approved for classified use, listed in the alliance’s Information Assurance Product Catalogue. Apple announced…

Juniper issues emergency patch for critical PTX router RCE

8 months ago

Juniper released an emergency patch for Junos OS Evolved to fix CVE-2026-21902, a critical RCE flaw affecting PTX routers. Juniper…

How AI Aids Incident Response: Why Humans Alone Cannot Do IR Efficiently

8 months ago

AI accelerates incident response by correlating alerts and generating reports in minutes, helping teams scale beyond manual limits. Incident response…

<gwmw style="display: none; background-color: transparent;"></gwmw>12 Million exposed .env files reveal widespread security failures<gwmw style="display: none; background-color: transparent;"></gwmw><gwmw style="display:none;"></gwmw>

8 months ago

Mysterium VPN found 12M IPs exposing .env files, leaking credentials and revealing widespread security misconfigurations worldwide. Configuration mistakes rarely trigger…

This website uses cookies.