Collaborate Disseminate
Unknown attackers claiming affiliation with the Cl0p extortion gang are hitting business and IT executives at various companies with emails claiming that they have exfiltrated sensitive data from the firms’ Oracle E-Business Suite (EBS). The emai… Continue reading Oracle customers targeted with emails claiming E-Business Suite breach, data theft
North Korea’s clandestine IT Worker (ITW) program, which is long known for targeting U.S. technology firms and crypto firms, has broadened its scope to attempt to infiltrate a variety of industries worldwide, including finance, healthcare, public admin… Continue reading North Korea’s IT workers are targeting firms beyond tech, crypto, and the U.S.
Google has rolled out AI-powered ransomware detection and file restoration features in Drive for desktop, Google’s official file syncing and access app for Windows and macOS. Currently in open beta, this new layer of defense is not meant to stop … Continue reading Google Drive for desktop will spot, stop and remedy ransomware damage
Despite Cisco and various cybersecurity agencies warning about attackers actively exploting zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) for months, there are still around 48,000 vulnerable ap… Continue reading Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts
Every time cyber defenders and companies discover new ways to block intrusions, attackers change their tactics and find a way around the defenses. “Living off the Land” (LOTL) is a prime example: since many detection tools became good at fl… Continue reading Hackers love LOTL, this approach shuts them down
The cooperative agreement between the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the not-for-profit Center for Internet Security is ending today, the agency has announced on Monday, and CISA will take it upon itself to offer suppo… Continue reading CISA says it will fill the gap as some federal funding for MS-ISAC dries up
Western Digital has fixed a critical remote code execution vulnerability (CVE-2025-30247) in the firmware powering its My Cloud network-attached storage (NAS) devices, and has urged users to upgrade as soon as possible. About CVE-2025-30247 Western Dig… Continue reading Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247)
Four hours or less: that’s how long it takes for Akira affiliates to break into organizations and deploy the ransomware on their systems, Arctic Wolf researchers have warned. Armed with SonicWall SSL VPN credentials stolen in earlier intrusions a… Continue reading Akira ransomware: From SonicWall VPN login to encryption in under four hours
CVE-2025-10035, a perfect CVSS 10.0 vulnerability in the Fortra GoAnywhere managed file transfer solution, has apparently been exploited in zero-day attacks before the patch was released on September 15, 2025. Evidence of in-the-wild exploitation revea… Continue reading Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035)
A widespread campaign aimed at breaching organizations via zero-day vulnerabilities in Cisco Adaptive Security Appliances (ASA) has been revealed by the US, UK, Canadian and Australian cybersecurity agencies. The suspected state-sponsored threat actor … Continue reading Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks