This weekly cybersecurity roundup highlights critical vulnerabilities, including an actively exploited Chrome zero-day and severe Kubernetes flaws. It covers emerging threats like BlackLock ransomware, solar inverter vulnerabilities, and RedCurl's pivot to ransomware. The report details so...
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a Microsoft Partner Center privilege escalation flaw (CVE-2024-49035) and a Zimbra Collaboration Suite cross-site scripting vulnerability (CVE-2023-34192). Federal agencies must apply secu...
Vietnamese threat actor XE Group shifts from credit card skimming to targeting enterprise software vulnerabilities in Progress Telerik UI and Advantive VeraCore. Using web shells and Meterpreter payloads, they exploit critical vulnerabilities for unauthorized system access. CISA adds five ...
A critical zero-day vulnerability in Zyxel CPE devices enables unauthorized command execution, with over 1,500 devices exposed online. Simultaneously, a separate campaign targets SimpleHelp remote desktop software through multiple CVEs, attempting unauthorized access and domain information...
A new Mirai botnet variant called "Murdoc" is targeting IoT devices globally, primarily AVTECH IP cameras and Huawei routers, with over 1,370 infected systems across Asia. The malware exploits known vulnerabilities to launch DDoS attacks, affecting telecommunications, technology, banking, ...
