Collaborate Disseminate
A critical vulnerability (CVE-2025-42957) in SAP S/4HANA enterprise resource planning software is being exploited by attackers “to a limited extent”, the Dutch National Cyber Security Center (NCSC NL) has warned on Friday. Their alert seems… Continue reading Attackers are exploiting critical SAP S/4HANA vulnerability (CVE-2025-42957)
AI agents can be tricked into covertly performing malicious actions by websites that are hidden from regular users’ view, JFrog AI architect Shaked Zychlinski has found. This novel approach allows attackers to inject prompts / instructions into t… Continue reading Stealthy attack serves poisoned web pages only to AI agents
Google has provided fixes for over 100 Android vulnerabilities, including CVE-2025-48543 and CVE-2025-38352, which “may be under limited, targeted exploitation.” Among the fixed flaws is also CVE-2025-48539, a critical vulnerability in the … Continue reading Google fixes actively exploited Android vulnerabilities (CVE-2025-48543, CVE-2025-38352)
A threat actor is leveraging a zero-day vulnerability (CVE-2025-53690) and an exposed sample ASP.NET machine key to breach internet-facing, on-premises deployments of several Sitecore solutions, Mandiant has revealed. About CVE-2025-53690 CVE-2025-5369… Continue reading Sitecore zero-day vulnerability exploited by attackers (CVE-2025-53690)
Cloudflare has also been affected by the Salesloft Drift breach, the US web infrastructure and security company confirmed on Tuesday, and the attackers got their hands on 104 Cloudflare API tokens. “We have identified no suspicious activity assoc… Continue reading Cloudflare confirms data breach linked to Salesloft Drift supply chain compromise
In the wake of last week’s revelation of a breach at Salesloft by a group tracked by Google as UNC6395, several companies – including Zscaler, Palo Alto Networks, PagerDuty, Tanium, and SpyCloud – have confirmed their Salesforce insta… Continue reading Zscaler, Palo Alto Networks, SpyCloud among the affected by Salesloft breach
A recently uncovered phishing campaign – carefully designed to bypass security defenses and avoid detection by its intended victims – is targeting firms in industrial manufacturing and other companies critical to various supply chains, Chec… Continue reading Attackers use “Contact Us” forms and fake NDAs to phish industrial manufacturing firms
Cybercriminals have started “vibe hacking” with AI’s help, AI startup Anthropic has shared in a report released on Wednesday. An attacker used the agentic AI coding assistant Claude Code for nearly all steps of a data extortion operat… Continue reading Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations
A threat group Google tracks as UNC6395 has pilfered troves of data from Salesforce corporate instances, in search of credentials that can be used to compromise those organizations’ environments. “[Google Threat Intelligence Group] observed… Continue reading Hundreds of Salesforce customer orgs hit in clever attack with potentially huge blast radius
Over 300,000 internet-facing Plex Media Server instances are still vulnerable to attack via CVE-2025-34158, a critical vulnerability for which Plex has issued a fix for earlier this month, Censys has warned. About CVE-2025-34158 Plex Media Server (PMS)… Continue reading 300k+ Plex Media Server instances still vulnerable to attack via CVE-2025-34158