Nominet, the UK's major domain registry managing over 11M domains, experienced a network breach via an Ivanti VPN zero-day vulnerability. While suspicious activity was detected, no data breaches were confirmed. The attack, linked to Chinese hackers, exploited CVE-2025-0282 in Ivanti Connec...
A critical zero-day vulnerability (CVE-2025-0282) has been discovered in Ivanti Connect Secure, allowing remote code execution through stack-based buffer overflow. Affecting multiple Ivanti products including Connect Secure, Policy Secure, and Neurons for ZTA gateways, the flaw carries a 9...
ESA's merchandise web store was taken offline following the discovery of a payment skimming attack that used malicious JavaScript to redirect customers to fake Stripe payment pages. The attackers used a lookalike domain to harvest credit card information, highlighting sophisticated e-comme...
Clop ransomware group launches extortion campaign against 66 companies affected by Cleo data theft attacks, giving them 48 hours to respond to ransom demands. The attack exploits a zero-day vulnerability in Cleo's software products, potentially affecting thousands of organizations worldwid...
CISA reports critical vulnerability (CVE-2024-12356) in BeyondTrust's remote access products, allowing unauthorized command execution. Cloud instances are patched, but self-hosted users must update immediately. This follows a recent cyber attack on BeyondTrust's systems, with patches avail...
