Collaborate Disseminate
Fortinet has confirmed that the critical vulnerability whose existence came to light last week is a zero-day flaw that has been exploited in at least one attack.
read more Continue reading Fortinet Confirms Zero-Day Vulnerability Exploited in One Attack
The Zimbra Collaboration Suite is impacted by a critical remote code execution vulnerability that remains unpatched, despite being exploited in attacks.
read more Continue reading Critical Zimbra RCE Vulnerability Exploited in Attacks
Fortinet has privately informed some customers about a critical and remotely exploitable vulnerability that poses a significant risk.
read more Continue reading Fortinet Customers Told to Urgently Patch Remotely Exploitable Vulnerability
Security researchers with threat hunting firm DCSO CyTec are warning of a new backdoor that has been targeting Microsoft SQL (MSSQL) servers.
read more Continue reading New ‘Maggie’ Backdoor Targeting Microsoft SQL Servers
Zimperium is warning of an Iranian hacking group using a new piece of Android spyware in a broad campaign that has also targeted enterprise users.
read more Continue reading Iranian Hackers Target Enterprise Android Users With New RatMilad Spyware
The NSA, FBI and CISA have issued an alert describing the tools and techniques used by advanced persistent threat (APT) actors in an attack aimed at an unnamed defense industrial base organization in the United States.
read more Continue reading US Government Details Tools Used by APTs in Defense Organization Attack
A mitigation proposed by Microsoft and others for the new Exchange Server zero-day vulnerabilities named ProxyNotShell can be easily bypassed, researchers warn.
The security holes, officially tracked as CVE-2022-41040 and CVE-2022-41082, can allow an a… Continue reading Mitigation for ProxyNotShell Exchange Vulnerabilities Easily Bypassed
CrowdStrike is warning of a recently identified supply chain attack involving Canada-based customer engagement software provider Comm100.
read more Continue reading Supply Chain Attack Targets Customer Engagement Firm Comm100
Microsoft has been investigating the attacks exploiting the new Exchange Server zero-day vulnerabilities and believes that a single state-sponsored threat group has been using them in highly targeted attacks.
read more Continue reading Microsoft Links Exploitation of Exchange Zero-Days to State-Sponsored Hacker Group