A previously undocumented state-backed threat actor is leveraging legitimate enterprise SaaS platforms to hide its command-and-control traffic. This strategy allows […]
China-linked GopherWhisper APT abuses Outlook and Slack for stealthy C2 comms Read More »
Ongoing analysis of a major supply chain intrusion has revealed additional compromised customer accounts following the abuse of a third-party
Vercel confirms additional compromised accounts in Context.ai-linked breach Read More »
A critical data persistence vulnerability in mobile notification services has been addressed following reports that it was being used by
Apple patches notification service flaw used to recover deleted Signal messages Read More »
Two critical vulnerabilities in the management plane of modern software-defined networking infrastructure are being actively exploited in the wild. These
CISA adds critical Cisco Catalyst SD-WAN Manager flaws to KEV catalog Read More »
A sophisticated supply chain attack targeting the Node Package Manager (npm) ecosystem is leveraging compromised developer tokens to distribute malicious
New npm supply chain campaign weaponizes compromised developer accounts Read More »
A critical vulnerability in a popular web server management interface is being weaponized to hijack enterprise web traffic and steal
Nginx-UI management platform under active exploitation for traffic hijacking Read More »
A maximum-severity privilege escalation vulnerability in a core web development framework allows attackers to bypass security boundaries and execute code
Microsoft releases emergency fix for critical ASP.NET Core privilege escalation flaw Read More »
A critical remote code execution vulnerability has been uncovered in the widely used protobuf.js library. An attacker can exploit this
Critical protobuf.js vulnerability enables arbitrary code execution Read More »
CISA has issued an emergency warning regarding the ongoing fallout from the supply chain compromise affecting the Axios npm package.
CISA warns of Axios supply chain compromise delivering remote access trojans Read More »
A cluster of 22 high-severity vulnerabilities has been identified in industrial serial-to-IP converters used to bridge legacy applications with modern
BRIDGE:BREAK flaws expose 20,000 industrial serial-to-IP converters Read More »
