information security news

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalogU.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

4 weeks ago
SentinelOne warns of threat actors targeting its systems and high-value clientsSentinelOne warns of threat actors targeting its systems and high-value clients

SentinelOne warns of threat actors targeting its systems and high-value clients

SentinelOne warns China-linked APT group PurpleHaze attempted reconnaissance on its systems and high-value clients. Cybersecurity firm SentinelOne warns that a…

4 weeks ago
Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024

Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zero-day flaws in 2024

Google tracked 75 zero-day flaws exploited in 2024, down from 98 in 2023, according to its Threat Intelligence Group's latest…

4 weeks ago
U.S. CISA adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalogU.S. CISA adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws…

4 weeks ago
The Turmoil Following BreachForums Shutdown: Confusion, Risks, and a New BeginningThe Turmoil Following BreachForums Shutdown: Confusion, Risks, and a New Beginning

The Turmoil Following BreachForums Shutdown: Confusion, Risks, and a New Beginning

BreachForums, a major data leak marketplace, shut down on April 15 after a MyBB 0-day exploit allowed law enforcement infiltration.…

4 weeks ago
Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast AsiaEarth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia

Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia

Earth Kurma APT carried out a sophisticated campaign against government and telecommunications sectors in Southeast Asia. Trend Research exposed the…

4 weeks ago
A large-scale phishing campaign targets WordPress WooCommerce usersA large-scale phishing campaign targets WordPress WooCommerce users

A large-scale phishing campaign targets WordPress WooCommerce users

A large-scale phishing campaign targets WordPress WooCommerce users with a fake security alert urging them to download a 'critical patch'…

1 month ago
PoC rootkit Curing evades traditional Linux detection systemsPoC rootkit Curing evades traditional Linux detection systems

PoC rootkit Curing evades traditional Linux detection systems

Researchers created a PoC rootkit called Curing that uses Linux’s io_uring feature to evade traditional system call monitoring. Armo researchers…

1 month ago
Attackers chained Craft CMS zero-days attacks in the wild<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>Attackers chained Craft CMS zero-days attacks in the wild<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Attackers chained Craft CMS zero-days attacks in the wild<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

Orange Cyberdefense's CSIRT reported that threat actors exploited two vulnerabilities in Craft CMS to breach servers and steal data. Orange…

1 month ago
Storm-1977 targets education sector with password spraying, Microsoft warnsStorm-1977 targets education sector with password spraying, Microsoft warns

Storm-1977 targets education sector with password spraying, Microsoft warns

Microsoft warns that threat actor Storm-1977 is behind password spraying attacks against cloud tenants in the education sector. Over the past…

1 month ago