Vulnerabilities

Palo Alto Recommends Urgent Mitigation For Authentication Bypass Vulnerability in PAN-OS

November 19, 2024 19:25 GMT

Update To OpenSSH Fixes Reintroduced Remote Code Execution Vulnerability

July 2, 2024 12:35 GMT

Patch Now To Fix Critical RCE Vulnerability In ConnectWise ScreenConnect

February 21, 2024 17:04 GMT

Mitigating The Unpatched Office and Windows HTML RCE (CVE-2023-36884)

July 18, 2023 18:32 GMT

March 2023 Patch Tuesday Closes Two Zero-Days Actively Exploited By State-Sponsored Actors

March 15, 2023 18:37 GMT

Critical Citrix ADC and Gateway Zero-Day Actively Exploited

December 14, 2022 19:40 GMT

Increased Scanning Activity for Recent Exchange SSRF Vulnerabilities

October 24, 2022 21:16 GMT

Microsoft Warns of Two Actively-Exploited Exchange Zero-Days

September 30, 2022 22:44 GMT

Vulnerabilities

CISA Warns of Exploited DDoS Vulnerability Impacting Palo Alto Firewalls

August 25, 2022 19:28 GMT

VMWare Patches Severe Vulnerabilities Across Multiple Platforms

August 4, 2022 15:00 GMT

CISA Suggests Patching Severe Vulnerability in OpenSSL

July 7, 2022 20:24 GMT

Follina Zero-Day Allows Zero-Click RCE From Office Docs

June 2, 2022 15:45 GMT

Hand-Picked Top-Read Stories

Weekly Top 10: 01.20.2025: fasthttp Used in New Bruteforce Campaign; Millions of Accounts Vulnerable Due to Google’s OAuth Flaw; The Great Google Ads Heist, and More.

RAT Roundup: How This Year’s More Interesting Trojans Could Affect You

Weekly Top 10: 01.06.2025: Brain Cipher Ransomware Gang Leaked Data from Rhode Island’s RIBrides Platform; Salt Typhoon Targets U.S. Treasury Department OFAC; Microsoft Issues Warning to .NET Developers, and More.

Trending Tags

Vulnerabilities

Palo Alto Recommends Urgent Mitigation For Authentication Bypass Vulnerability in PAN-OS

Update To OpenSSH Fixes Reintroduced Remote Code Execution Vulnerability

Patch Now To Fix Critical RCE Vulnerability In ConnectWise ScreenConnect

Mitigating The Unpatched Office and Windows HTML RCE (CVE-2023-36884)

March 2023 Patch Tuesday Closes Two Zero-Days Actively Exploited By State-Sponsored Actors

Critical Citrix ADC and Gateway Zero-Day Actively Exploited

Increased Scanning Activity for Recent Exchange SSRF Vulnerabilities

Microsoft Warns of Two Actively-Exploited Exchange Zero-Days

CISA Warns of Exploited DDoS Vulnerability Impacting Palo Alto Firewalls

VMWare Patches Severe Vulnerabilities Across Multiple Platforms

CISA Suggests Patching Severe Vulnerability in OpenSSL

Follina Zero-Day Allows Zero-Click RCE From Office Docs

Threat Advisories

Weekly Top 10: 01.20.2025: fasthttp Used in New Bruteforce Campaign; Millions of Accounts Vulnerable Due to Google’s OAuth Flaw; The Great Google Ads Heist, and More.

Weekly Top 10: 01.06.2025: Brain Cipher Ransomware Gang Leaked Data from Rhode Island’s RIBrides Platform; Salt Typhoon Targets U.S. Treasury Department OFAC; Microsoft Issues Warning to .NET Developers, and More.

Weekly Top 10: 12.30.2024: Cybersecurity Firm’s Chrome Extension Hijacked to Steal Users’ Data; New ‘Ottercookie’ Malware Used to Backdoor Devs in Fake Job Offers; White House Links Ninth Telecom Breach to Chinese Hackers, and More.

Weekly Top 10: 12.23.2024: Android Malware Delivered via the Amazon Appstore; TP-Link Network Devices Under Investigation by the US DoJ; Play Ransomware Group Takes Credit for Attack on Krispy Kreme, and More.

Weekly Top 10: 12.16.2024: OpenWrt Flaw Allows Distribution of Malicious Firmware; Vulnerability in WPForms Allows for Arbitrary Stripe Refunds; AuthQuake Attack Allows MFA Bypass for Microsoft Accounts, and More.

Education

Protecting Microsoft Teams From Data Exfiltration – A Tactical DLP Rule

Anatomy of a Data Breach

OpenAI Cybersecurity Research

Breach Report: Healthcare

Analysis of GalComm Chrome Extension Malware