Vulnerabilities

Palo Alto Recommends Urgent Mitigation For Authentication Bypass Vulnerability in PAN-OS

November 19, 2024 19:25 GMT

Update To OpenSSH Fixes Reintroduced Remote Code Execution Vulnerability

July 2, 2024 12:35 GMT

Patch Now To Fix Critical RCE Vulnerability In ConnectWise ScreenConnect

February 21, 2024 17:04 GMT

Mitigating The Unpatched Office and Windows HTML RCE (CVE-2023-36884)

July 18, 2023 18:32 GMT

March 2023 Patch Tuesday Closes Two Zero-Days Actively Exploited By State-Sponsored Actors

March 15, 2023 18:37 GMT

Critical Citrix ADC and Gateway Zero-Day Actively Exploited

December 14, 2022 19:40 GMT

Increased Scanning Activity for Recent Exchange SSRF Vulnerabilities

October 24, 2022 21:16 GMT

Microsoft Warns of Two Actively-Exploited Exchange Zero-Days

September 30, 2022 22:44 GMT

Vulnerabilities

CISA Warns of Exploited DDoS Vulnerability Impacting Palo Alto Firewalls

August 25, 2022 19:28 GMT

VMWare Patches Severe Vulnerabilities Across Multiple Platforms

August 4, 2022 15:00 GMT

CISA Suggests Patching Severe Vulnerability in OpenSSL

July 7, 2022 20:24 GMT

Follina Zero-Day Allows Zero-Click RCE From Office Docs

June 2, 2022 15:45 GMT

Hand-Picked Top-Read Stories

Weekly Top 10: 05.26.2025: Botnets Disrupted Worldwide… Operation Endgame Is Back; Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks; M&S’ $400 Million Cyberattack Upheaval to Linger Into July; and More.

Weekly Top 10: 05.19.2025: Two 0-Day Exploits in Ivanti Endpoint Management Used in the Wild; Windows 10 Updates Cause Bootlocker Encryption; AI Vishing Campaign Impersonates Government Officials; and More.

The Modern IR Runbook

Trending Tags

Vulnerabilities

Palo Alto Recommends Urgent Mitigation For Authentication Bypass Vulnerability in PAN-OS

Update To OpenSSH Fixes Reintroduced Remote Code Execution Vulnerability

Patch Now To Fix Critical RCE Vulnerability In ConnectWise ScreenConnect

Mitigating The Unpatched Office and Windows HTML RCE (CVE-2023-36884)

March 2023 Patch Tuesday Closes Two Zero-Days Actively Exploited By State-Sponsored Actors

Critical Citrix ADC and Gateway Zero-Day Actively Exploited

Increased Scanning Activity for Recent Exchange SSRF Vulnerabilities

Microsoft Warns of Two Actively-Exploited Exchange Zero-Days

CISA Warns of Exploited DDoS Vulnerability Impacting Palo Alto Firewalls

VMWare Patches Severe Vulnerabilities Across Multiple Platforms

CISA Suggests Patching Severe Vulnerability in OpenSSL

Follina Zero-Day Allows Zero-Click RCE From Office Docs

Threat Advisories

Weekly Top 10: 05.26.2025: Botnets Disrupted Worldwide… Operation Endgame Is Back; Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks; M&S’ $400 Million Cyberattack Upheaval to Linger Into July; and More.

Weekly Top 10: 05.19.2025: Two 0-Day Exploits in Ivanti Endpoint Management Used in the Wild; Windows 10 Updates Cause Bootlocker Encryption; AI Vishing Campaign Impersonates Government Officials; and More.

Weekly Top 10: 05.12.2025: Critical Code Execution Flaw Patched in LangFlow; CISA Warns Threat Actors are Targeting Energy and Transportation Systems Sectors, Google Patches Zero-Click RCE Flaw on Android, and More.

Weekly Top 10: 05.05.2025: Using Trusted Protocols Against You: Gmail as a C2 Mechanism, Shadow Roles: AWS Defaults Can Open the Door to Service Takeover, Gremlin Stealer: New Stealer on Sale in Underground Forum, and More.

Weekly Top 10: 04.21.2025: ASUS AiCloud Authentication Bypass, CISA Warns of SonicWall SMA Being Actively Exploited, ‘Mustang Panda’ Employs Four New Attack Tools, and More.

Education

Protecting Microsoft Teams From Data Exfiltration – A Tactical DLP Rule

Anatomy of a Data Breach

OpenAI Cybersecurity Research

Breach Report: Healthcare

Analysis of GalComm Chrome Extension Malware