A sophisticated supply chain attack targeting the Node Package Manager (npm) ecosystem is leveraging compromised developer tokens to distribute malicious […]
New npm supply chain campaign weaponizes compromised developer accounts Read More »
Two critical vulnerabilities in the management plane of modern software-defined networking infrastructure are being actively exploited in the wild. These
CISA adds critical Cisco Catalyst SD-WAN Manager flaws to KEV catalog Read More »
CISA has issued an emergency warning regarding the ongoing fallout from the supply chain compromise affecting the Axios npm package.
CISA warns of Axios supply chain compromise delivering remote access trojans Read More »
A critical remote code execution vulnerability has been uncovered in the widely used protobuf.js library. An attacker can exploit this
Critical protobuf.js vulnerability enables arbitrary code execution Read More »
A cluster of 22 high-severity vulnerabilities has been identified in industrial serial-to-IP converters used to bridge legacy applications with modern
BRIDGE:BREAK flaws expose 20,000 industrial serial-to-IP converters Read More »
Unauthenticated attackers are rampantly exploiting a critical SQL injection flaw in endpoint management servers to execute unauthorized commands. The volume
Fortinet FortiClient EMS SQL injection exploitation surges following KEV deadline Read More »
An unauthenticated remote code execution vulnerability in the core Windows networking stack is being exploited to compromise VPN gateways and
Critical Windows IKEv2 remote code execution zero-day added to CISA KEV Read More »
Attackers are industrializing the exploitation of a publicly leaked privilege escalation flaw in the Windows security subsystem to gain SYSTEM-level
Active exploitation of BlueHammer Windows Defender privilege escalation flaw surging Read More »
A critical supply chain breach has impacted a major cloud development platform following the compromise of an employee Google Workspace
Vercel confirms internal breach linked to compromised AI tool and ShinyHunters extortion Read More »
Attackers are actively exploiting a critical spoofing vulnerability in SharePoint Server to falsify internal corporate communications and facilitate high-fidelity phishing.
Microsoft SharePoint Server zero-day exploited for trusted content spoofing Read More »
