Ransomware
Mitel zero-day exploited by hackers to deploy ransomware
The zero-day was believed to be used as part of a ransomware attack.
vulnerability
Cyber Security
New ToddyCat APT targets Microsoft Exchange Servers in Europe and Asia
An advanced persistent threat (APT) actor tracked as ToddyCat has been linked to a string of attacks aimed at government and military entities in Europe and…
Vulnerabilities
WordPress sites force-updated to patch a critical plugin flaw
Ninja Forms is a forms builder plugin with more than 1 million installations.
Vulnerabilities
New Zimbra email flaw allows attackers to steal login credentials
A high-severity vulnerability was discovered in the Zimbra email suite which could be exploited by an unauthenticated attacker to steal login credentials of users. The vulnerability…
Vulnerabilities
New Hertzbleed side channel attack affects Intel and AMD CPUs
A new security vulnerability known as Hertzbleed was discovered in modern Intel and AMD processors that could let remote attackers steal encryption keys via a power…
Cyber Attacks
US local government targeted in phishing attacks
Windows zero-day exploited in phishing campaigns against European and US local governments.
Vulnerabilities
Critical Atlassian Confluence Zero-Day RCE flaw actively used in attacks
Atlassian warns of an actively exploited critical unpatched remote code execution vulnerability that impacts all Confluence Server and Data Center supported versions. The flaw that has…
Vulnerabilities
Critical bug in Zyxel firewalls and VPNs exploited
Over 20,000 Zyxel firewalls vulnerable to unauthenticated remote code execution bug.
Vulnerabilities
Unpatched DNS bug affects millions of routers and IoT devices
A vulnerability in the domain name system (DNS) component of a popular C standard library which is present in a wide range of IoT products may…
Vulnerabilities
Vulnerability found in WordPress plugin with over 3 million installations
UpdraftPlus flaw allowed subscribers to download sensitive backups.
