Latest News

Threat actors used automation to create over 175 malicious NPM packages targeting more than 135 organizations.

It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild.  

The authorities arrested GoogleXcoder, the alleged administrator of GXC Team, which offered phishing kits and Android malware.

The data allegedly pertains to Albertsons, Engie Resources, Fujifilm, GAP, Qantas, and Vietnam Airlines.

Other noteworthy stories that might have slipped under the radar: US universities targeted by payroll pirates, Zimbra vulnerability exploited, Mic-E-Mouse attack.

GreyNoise has discovered that attacks exploiting Cisco, Fortinet, and Palo Alto Networks vulnerabilities are launched from the same infrastructure.

The botnet packs over 50 exploits targeting unpatched routers, DVRs, NVRs, CCTV systems, servers, and other network devices.

Patches were rolled out for more than 200 vulnerabilities in Junos Space and Junos Space Security Director, including nine critical-severity flaws.

The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.

Apple has announced significant updates to its bug bounty program, including new categories and target flags.

Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations.

The cybersecurity startup will use the investment to accelerate its product development and market expansion efforts.

Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code.

The company said there is no evidence that confidential client data was stolen from its systems.

In early September, hackers stole the firewall configuration backup files stored using the MySonicWall service.