Ransomware breaches ~40 shipping companies via supply chain attack
Supply chain ransomware hits 40 shipping firms, Quest Diagnostics breach, Oracle emergency Java patch, and Cisco Expressway RCE fix.
In this digest
Security Intel Feed
Cyber Hose
Page 6 of 92
Read digest
Ivanti Connect Secure auth bypass zero-day added to CISA KEV
Actively exploited Ivanti Connect Secure zero-day headlines this run, alongside Citrix NetScaler RCE, Chrome V8 zero-days, and a Magento RCE.
In this digest
Hijacked developer GitHub account used to plant stealer in OVHcloud
A compromised OVHcloud developer GitHub account was used to insert a secret-stealing binary into official ovhcloud-cli releases.
In this digest
Oracle Essbase Flaw Allows Low-Privilege Network Takeover
A CVSS 9.9 Oracle Essbase flaw leads this digest, with Lazarus' Operation FlashHole and a critical Duplicator plugin bug.
In this digest
CISA adds four chained Plex Media Server flaws to KEV catalog
CISA adds chained Plex Media Server flaws to KEV, Zeabur shuts down after second breach, and SiteGuard WAF allows root command injection.
In this digest
Eight eMudhra CA keys compromised, triggering emergency browser blocks
Eight eMudhra CA keys compromised prompting emergency browser blocks, two unpatched PHP 10.0 RCEs leaked, and BeyondTrust zero-day exploited by PRC actor.
In this digest
AOMEI Backupper Supply Chain Attack Delivers ShinyRoad Backdoor
Supply chain attack on AOMEI Backupper's 186M users leads this digest, alongside a Go CA key emergency block and 333 malicious Tor exit nodes.
In this digest
Ransomware gangs exploit GlobalProtect MFA bypass, steal credentials
Ransomware gangs exploit a Palo Alto GlobalProtect MFA bypass to steal credentials, a healthcare breach hits 970K, and a Cellebrite iPhone zero-day surfaces.
In this digest
Hacker claims SBI data breach exposing 3.75 lakh customer records
An unverified claim of 375,000 SBI customer records leads this run, plus a critical Letta RCE and fake Google Meet phishing pages.
In this digest
Qubic halts blockchain after weak seed flaw drains 1,404 wallets
Qubic halts after weak seeds drain 1,404 wallets; Heartbreaker macOS ransomware found undetected; Cloudflare Pingora CVE disclosed.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check