Collaborate Disseminate
Cloud risk management and threat detection firm Rapid7 warns that it has seen organizations being compromised in attacks exploiting a recently patched Zoho ManageEngine vulnerability.
read more Continue reading In-the-Wild Exploitation of Recent ManageEngine Vulnerability Commences
Fortinet warns of three new malicious PyPI packages containing code designed to fetch the Wacatac trojan and information stealer as a next stage payload.
read more Continue reading PyPI Users Targeted With ‘Wacatac’ Trojan in New Supply Chain Attack
A GitHub Codespaces feature meant to help with code development and collaboration can be abused for malware delivery, Trend Micro reports.
read more Continue reading Attackers Can Abuse GitHub Codespaces for Malware Delivery
Most internet-exposed Cacti installations have not been patched against a critical-severity command injection vulnerability that is being exploited in attacks.
read more Continue reading Most Cacti Installations Unpatched Against Exploited Vulnerability
Cybersecurity firm Group-IB is raising the alarm on a newly identified advanced persistent threat (APT) actor targeting government and military organizations in Asia and Europe.
read more Continue reading Sophisticated ‘Dark Pink’ APT Targets Government, Military Organizations
Exploitation of a critical vulnerability affecting the widely used SugarCRM customer relationship management system was seen just days after someone made public an exploit.
read more Continue reading Recently Disclosed Vulnerability Exploited to Hack Hundreds of SugarCRM Servers
Red Hat announced on Tuesday the general availability of a malware detection service for Red Hat Enterprise Linux (RHEL) systems.
read more Continue reading Red Hat Announces General Availability of Malware Detection Service
A cybercrime group tracked as Scattered Spider has been observed exploiting an old vulnerability in an Intel Ethernet diagnostics driver for Windows in recent attacks on telecom and BPO firms.
read more Continue reading Cybercrime Group Exploiting Old Windows Driver Vulnerability to Bypass Security Products
Software supply chain security firm Phylum has identified a malicious attack targeting Python Package Index (PyPI) users with the PoweRAT backdoor and information stealer.
read more Continue reading PyPI Users Targeted With PoweRAT Malware
More than a dozen new Mac malware families were discovered in 2022, including information stealers, cryptocurrency miners, loaders, and backdoors, and many of them have been linked to China.
read more Continue reading Many of 13 New Mac Malware Families Discovered in 2022 Linked to China