CYBER ATTACKS

Cyber Attacks

China-Linked ‘Fire Ant’ Hackers Caught Hijacking Cisco Routers to Spy and Erase Their Tracks

Sneha Gupta - 0
Incident response firm Sygnia has detailed a sophisticated espionage campaign in which a China-linked group implanted malware directly inside Cisco routers and authentication servers to intercept credentials and erase evidence of its own presence.
Cyber Attacks

PaperCut Issues Second Emergency Patch After Zero-Day Flaws Exploited in the Wild

Sneha Gupta - 0
PaperCut has rushed out two rounds of emergency patches after researchers found attackers chaining two zero-day vulnerabilities to gain remote code execution on unpatched NG and MF print servers, with active exploitation confirmed since August 26.

Boston Scientific Cyberattack Disrupts Global Operations, Halts Order Processing

PaperCut Rushes Out Emergency Patch as Hackers Exploit Unpatched Flaw

CISA Says Iran-Linked Hackers Targeted More Than 100 US Water Systems in July

Hackers Breach Over 270 Zimbra Servers as CISA Orders Emergency Patching

Security News

General

Critical Keycloak Flaw Let Attackers Reset Any Password Without Email Access

Sneha Gupta - 0
A critical bug in Keycloak's password reset flow, tracked as CVE-2026-18963 with a CVSS score of 9.1, could have let attackers take over any account without ever accessing the victim's email.
Information

Four-Year Study Finds Over 9,300 Exposed AWS Keys Are Still Active, Hundreds With Full Admin Rights

Sneha Gupta - 0
A four-year study by Truffle Security found more than 9,300 exposed AWS access keys remain active today, including hundreds of root and administrator-level credentials capable of handing an outsider full control of a company's cloud account.

Critical GitLab Vulnerability Already Under Attack Days After Patch Release

Microsoft Patches Maximum-Severity Entra ID Flaw Already Exploited in Attacks

CVSS is Dead. CISA Just Made It Official.

Information Security Trends Advisory for 2024

Subscribe

* indicates required

Intuit Mailchimp

Security Standards

Documents

DNS4EU – A Whitepaper

Amit Gupta - 0
DNS4EU is a European Union initiative aimed at strengthening digital sovereignty and cybersecurity. Unlike foreign DNS services that often lack GDPR compliance and transparency,...

The real Cost Of A Free Wi-Fi Connection

Bug Bounty Programs: March 2022

Regional

General

CVSS is Dead. CISA Just Made It Official.

Amit Gupta - 0
For years, vulnerability management has been reduced to a simple equation: CVSS ≥ 9 = Drop everything and patch. The problem is that attackers don't think...

The U.S.  SEC takes a strong stance on Cybersecurity Risk Management, Incident Disclosure, Strategy, and Governance by Public Companies

Vulnerabilities

Google Patches Actively Exploited Chrome Zero-Day in V8 Engine

Sneha Gupta - 0
Google has released an emergency Chrome update to fix a zero-day vulnerability in the browser's V8 engine that attackers are already exploiting in the wild. Users should update immediately.

CISA Adds Seven Actively Exploited Flaws to KEV Catalog, Including Two Maximum-Severity Bugs

Sneha Gupta - 0
CISA added seven actively exploited vulnerabilities, including two rated maximum severity, to its Known Exploited Vulnerabilities catalog, with attackers already using them to deploy reverse shells and cryptocurrency miners.

Nearly 22,000 Exchange Servers Remain Exposed to Critical Authentication Bypass Flaw

Sneha Gupta - 0
Nearly 22,000 Microsoft Exchange servers worldwide remain unpatched against a high-severity authentication bypass flaw with public exploit code, weeks after Microsoft released a fix.

Critical JFrog Artifactory Flaw Under Active Attack Just Days After Patch Release

Sneha Gupta - 1
Attackers are actively exploiting a critical authentication bypass in JFrog Artifactory that lets them create their own admin accounts, according to researchers at watchTowr. Self-hosted customers who have not yet patched should update immediately.

PaperCut Issues Second Emergency Patch After Zero-Day Flaws Exploited in the Wild

Sneha Gupta - 0
PaperCut has rushed out two rounds of emergency patches after researchers found attackers chaining two zero-day vulnerabilities to gain remote code execution on unpatched NG and MF print servers, with active exploitation confirmed since August 26.

Data Breaches

153 Million Driver’s Licenses Offered for Sale After Suspected Breach at ID Verification Firm IDScan.net

Sneha Gupta - 0
Data Breaches
A dark web marketplace called Nexus is selling scans of more than 153 million US and Canadian driver's licenses that researcher Brian Krebs traced to identity verification firm IDScan.net, whose clients include Hertz, Target and FedEx. The FBI has opened an investigation and class action lawsuits have followed.

LATEST ARTICLES

123...12Page 1 of 12

Most Popular

Load more

Stay Connected

1,321FollowersFollow
61,453SubscribersSubscribe

Write to Us

Want to report a concern or publish a security incident on our channel?

Write to us