Oracle EBS pre-auth RCE flaw under exploratory attack
A CVSS 9.8 Oracle EBS RCE leads this run, plus a Sony breach hitting 2.58M records and CISA adding a Brotli flaw to KEV.
In this digest
Security Intel Feed
Cyber Hose
Page 4 of 91
Read digest
Cyberattack attempt forces FEC to shut down electronic filing system
FEC shuts down electronic filing after cyberattack attempt; 42 GitHub repos hijacked with AI-tool malware; Moldova health breach hits a third of records.
In this digest
New Kerberos abuse path: constrained delegation without protocol
Researcher combines reflective RBCD with U2U sacrificial user technique to enable constrained delegation abuse against SPN-less accounts in Active Directory.
In this digest
Critical pre-boot RCE in EDK2 PXE driver affects most server UEFI
A pre-boot RCE in EDK2's PXE driver threatens most servers worldwide, CISA adds Adobe Commerce flaw to KEV, and Magecart skimmers hit Brazilian e-commerce.
In this digest
Warp breach exposes AI agent logs and user telemetry data
Warp disclosed a breach via a third-party vendor exposing AI agent decision logs and telemetry of about 1% of its 800,000 users.
In this digest
Cyberattacks Disrupt Care at UNM Health and University Hospitals
Hospital cyberattacks disrupt care at two major US health systems, while FortiBleed 2.0 exposes 40,573 FortiGate secrets and HashiCorp patches a CVSS 9.9 flaw.
In this digest
AI-assisted hacker breaches 90 South Korean orgs, steals 8.2M records
South Korea's first large-scale AI-assisted hacking campaign hit 90 organizations and 8.2M records, while ASD disrupted a 180,000-node Amadey botnet.
In this digest
Storm-0940 uses ARTEX AI to attack 2,250+ Microsoft 365 tenants
Storm-0940 weaponized agentic AI via ConnectWise supply chain to hit 2,250+ Microsoft 365 tenants, plus Dahua camera hijacks and DarkSword spyware campaigns.
In this digest
Cyberattack forces UNM Health to divert ambulances and close clinics
A cyberattack on UNM Health's Level 1 trauma center forced ambulance diversions and clinic closures, plus DarkCore RAT and WordPress backdoor research.
In this digest
Apple patches exploited CoreGraphics zero-day in older iPhones, iPads
Apple patches an exploited CoreGraphics zero-day for older devices, DreamHost forces password resets, and The Gentlemen RaaS claims 800+ victims.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check