Cisco reveals 2 max-severity defects in firewall management software

The vendor said it’s not aware of any active exploitation of the vulnerabilities, which could allow remote attackers to achieve root access and execute code.

The post Cisco reveals 2 max-severity defects in firewall management software appeared first on CyberScoop.

Continue reading Cisco reveals 2 max-severity defects in firewall management software→

Global coalition dismantles Tycoon 2FA phishing kit

Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure. The alleged creator was also named in a civil complaint.

The post Global coalition dismantles Tycoon 2FA phishing kit appeared first on CyberScoop.

Continue reading Global coalition dismantles Tycoon 2FA phishing kit→

Authorities from 14 countries shut down major cybercrime forum LeakBase

The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.

The post Authorities from 14 countries shut down major cybercrime forum LeakBase appeared first on CyberScoop.

Continue reading Authorities from 14 countries shut down major cybercrime forum LeakBase→

Authorities from 14 countries shut down major cybercrime forum LeakBase

The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.

The post Authorities from 14 countries shut down major cybercrime forum LeakBase appeared first on CyberScoop.

Continue reading Authorities from 14 countries shut down major cybercrime forum LeakBase→

Attackers are using your network against you, according to Cloudflare

Blind spots in complex cloud environments allow identity-based attacks to achieve the same outcome as complex malware or zero-day exploits. Sophistication need not apply.

The post Attackers are using your network against you, according to Cloudflare appeared first on CyberScoop.

Continue reading Attackers are using your network against you, according to Cloudflare→

Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities

The company’s latest security update contains the highest number of Android vulnerabilities patched in a single month since April 2018.

The post Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities appeared first on CyberScoop.

Continue reading Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities→

Project Compass is Europol’s new playbook for taking on The Com

Officials said 30 perpetrators have been arrested in the past year, and global law enforcement cooperation is closing the gap.

The post Project Compass is Europol’s new playbook for taking on The Com appeared first on CyberScoop.

Continue reading Project Compass is Europol’s new playbook for taking on The Com→

Governments issue warning over Cisco zero-day attacks dating back to 2023

The global campaign marks the second series of multiple actively exploited zero-day vulnerabilities in Cisco edge technology since last spring. The similarities don’t end there.

The post Governments issue warning over Cisco zero-day attacks dating back to 2023 appeared first on CyberScoop.

Continue reading Governments issue warning over Cisco zero-day attacks dating back to 2023→

Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacks

Too many defenders and researchers are paying attention to defects and unsubstantiated exploit concepts that aren’t worth their time, VulnCheck’s Caitlin Condon said.

The post Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacks appeared first on CyberScoop.

Continue reading Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacks→

CrowdStrike says attackers are moving through networks in under 30 minutes

The average time from intrusion to network movement in 2025 was 29 minutes, a 65% increase in speed from the year prior.

The post CrowdStrike says attackers are moving through networks in under 30 minutes appeared first on CyberScoop.

Continue reading CrowdStrike says attackers are moving through networks in under 30 minutes→