BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA

BeyondTrust has released updates to address a critical security flaw impacting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could result in remote code execution.
“BeyondTrust Remote Support (RS) and … Continue reading BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA→

Posted in Uncategorized

German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists

Germany’s Federal Office for the Protection of the Constitution (aka Bundesamt für Verfassungsschutz or BfV) and Federal Office for Information Security (BSI) have issued a joint advisory warning of a malicious cyber campaign undertaken by a likely sta… Continue reading German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists→

Posted in Uncategorized

China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking, Malware Delivery

Cybersecurity researchers have taken the wraps off a gateway-monitoring and adversary-in-the-middle (AitM) framework dubbed DKnife that’s operated by China-nexus threat actors since at least 2019.
The framework comprises seven Linux-based implants that… Continue reading China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking, Malware Delivery→

Posted in Uncategorized

CISA Orders Removal of Unsupported Edge Devices to Reduce Federal Network Risk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered Federal Civilian Executive Branch (FCEB) agencies to strengthen asset lifecycle management for edge network devices and remove those that no longer receive security updates fr… Continue reading CISA Orders Removal of Unsupported Edge Devices to Reduce Federal Network Risk→

Posted in Uncategorized

Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities

A previously undocumented cyber espionage group operating from Asia broke into the networks of at least 70 government and critical infrastructure organizations across 37 countries over the past year, according to new findings from Palo Alto Networks Un… Continue reading Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities→

Posted in Uncategorized

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

Cybersecurity researchers have discovered a new supply chain attack in which legitimate packages on npm and the Python Package Index (PyPI) repository have been compromised to push malicious versions to facilitate wallet credential theft and remote cod… Continue reading Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware→

Posted in Uncategorized

Claude Opus 4.6 Finds 500+ High-Severity Flaws Across Major Open-Source Libraries

Artificial intelligence (AI) company Anthropic revealed that its latest large language model (LLM), Claude Opus 4.6, has found more than 500 previously unknown high-severity security flaws in open-source libraries, including Ghostscript, OpenSC, and CG… Continue reading Claude Opus 4.6 Finds 500+ High-Severity Flaws Across Major Open-Source Libraries→

Posted in Uncategorized