A newly discovered phishing campaign uses deliberately corrupted Microsoft Office files and ZIP archives to bypass security measures. The attack exploits built-in recovery mechanisms while evading antivirus software and filters, using QR codes to direct victims to malware sites and phishin...
Japan's CERT warns of three critical zero-day vulnerabilities in I-O Data UD-LT1 and UD-LT1/EX routers, enabling unauthorized access, command execution, and firewall manipulation. Only one flaw is currently patched, with complete fixes expected by December 2024. Users advised to implement ...
Critical security vulnerability (CVE-2024-10905) discovered in SailPoint IdentityIQ IAM software allows unauthorized access to protected content through HTTP, affecting multiple versions prior to recent patches. The flaw carries maximum CVSS score of 10.0 and stems from improper file name ...
Veeam patches two critical vulnerabilities in Service Provider Console (VSPC), including a severe remote code execution flaw (CVE-2024-42448, CVSS 9.9) and a security leak vulnerability (CVE-2024-42449, CVSS 7.1). Users must upgrade to version 8.1.0.21999 to protect against potential attac...
International intelligence agencies warn of ongoing Chinese state-sponsored cyber espionage targeting telecommunications providers, with active threat group "Salt Typhoon" compromising U.S. networks. The advisory outlines critical security measures including enhanced network monitoring, st...
