Browsing Category
Vulnerability
41 posts
Attackers Exploit Critical Node-RED Flaw in Siemens Industrial Gateways
Automated attacks are abusing a Node-RED vulnerability to run commands and plant backdoors.
Unit 42 Retracts PHP2Shell Breach Claim as CISA Confirms Attacks
A retraction, a KEV listing and a flood of fake exploits muddy the PHP2Shell picture.
The PHP2Shell Checklist: You’re Not Safe Until You’re Safe
Installing the emergency patch is the first step, not the finish line. Here are the places PHP2Shell can outlive a “patched” status — and what it takes to prove it is gone.
Hackers Turn Signed Siemens Program Into ClickFix Malware Loader
Attackers bundle an older, signed copy of the Siemens tool with malicious DLLs, so patching real installs won't stop them.
Ahsay Issues Second AhsayCBS Fix After Earlier Patch Fails
Attackers are chaining two AhsayCBS flaws to gain SYSTEM-level control of backup servers. Huntress says the new hotfix blocks the initial exploitation path left open by version 10.3.4.0.
Cyber Threat Report: How EU Attacks Compare With the US
DDoS attacks were the most common cyberattack in the European Union last year, but the EU’s own cybersecurity…
Zoom and Gloom as Researchers Uncover RCE Flaw in Conferencing App
Zoom fixed three critical vulnerabilities in its meeting-annotation feature that could allow remote code execution on participant devices, discovered by researchers utilizing AI.
EU Cyber Agency Adds NATO, AI Firm to CVE Program
ENISA expands CVE program footprint, adds NATO and AI security firm as new CNAs.
SonicWall VPN Flaw Chain Gives INC Ransomware Root Access
INC Ransomware threat actors exploited a critical pre-auth bypass flaw and pairing it with a privilege-escalation bug to gain root on SonicWall SMA 1000 appliances.
Firefox Patches Two Critical Bugs as Exploit Code Goes Public
Mozilla says it has not detected attacks exploiting the WebAssembly and site-isolation vulnerabilities fixed in Firefox 152.0.6