Ransomware groups exploit PAN-OS GlobalProtect auth bypass
Ransomware crews exploit a PAN-OS GlobalProtect auth bypass for VPN access, while AOMEI update servers were briefly hijacked to deliver backdoors.
In this digest
Security Intel Feed
Cyber Hose
Page 7 of 92
Read digest
ConnectWise suspends Cloud Backup after credential abuse hits M365
ConnectWise credential abuse hits hundreds of M365 tenants; Plex2Shell RCE exploited; Bullhorn outage; Drupal critical RCE patched.
In this digest
ConnectWise Suspends Cloud Services After M365 Tenant Attacks
ConnectWise suspended cloud services after compromised credentials hit hundreds of M365 tenants, while Plex2Shell exploits hit Plex servers post-disclosure.
In this digest
Stolen UpdraftCentral keys install backdoor plugins on WordPress sites
Stolen dashboard keys backdoor 4M+ WordPress sites, H2O Retailing leaks 1.26M member records, and Pegasus targets Serbian officials before elections.
In this digest
Plex Media Server flaws exploited in the wild to deploy XMRig miner
Chained Plex Media Server flaws are under active exploitation deploying XMRig, plus a Broadcom Wi-Fi root flaw and a Linux KVM guest-to-host escape.
In this digest
Hackers exploit SiteGuard WAF command injection flaw for root access
SiteGuard WAF command injection under active exploitation across hundreds of thousands of sites, plus this week's security roundup and new CVEs.
In this digest
Fortinet path traversal flaw CVE-2025-61624 added to CISA KEV
Fortinet path traversal flaw hits CISA KEV, Citizen Lab exposes Candiru spyware via ad networks, and Drupal patches critical RCE flaws.
In this digest
- Fortinet path traversal flaw CVE-2025-61624 in FortiOS, FortiPAM, FortiProxy, FortiSwitchManager added to CISA KEV
- Citizen Lab ties Candiru zero-click spyware infections at Al Jazeera to Discover-Tech online ads
- Drupal patches critical Field UI and Entity List RCE flaws, warns exploits may emerge fast
BAE Systems incident halts US bankruptcy court notices nationwide
A BAE Systems cyber incident has knocked out the Bankruptcy Noticing Center, halting notices nationwide since October 9.
In this digest
Armory Castle exploited BeyondTrust zero-day since August
BeyondTrust zero-day under active exploitation, BAE cyberattack disrupts federal courts, F5 and Juniper patch critical RCEs, and CoGUI phishing hits Japan.
In this digest
FreeRDP: Multiple High-Severity Flaws Including Heap Overflows
FreeRDP faces several high-severity flaws before 3.32.0, alongside an Archon AI unauthenticated RCE and DataSuckers arrests.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check