The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,311 reports across 7 topics, updated hourly.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Wednesday the addition of seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities have been actively targeted by malicious actors, indicating their significant risk to organizations.
A sophisticated malware campaign is actively distributing malicious installers through deceptive software-download websites, masquerading as legitimate vendors to trick unsuspecting users. These fake installers are designed to disable critical security features on Windows operating systems, specifically targeting Windows Update…
Manifold Security has identified eight critical security vulnerabilities affecting seven popular command-line AI coding agents, enabling attackers to execute arbitrary code on developer machines. These vulnerabilities, detailed in a disclosure on March 13, 2024, leverage the `.git/config` file…
A cybercrime group identified as Gambling Goblin has been actively exploiting vulnerabilities to install malicious Apache modules on web servers belonging to Brazilian government and educational institutions. These compromised servers are then used to redirect unsuspecting visitors to attacker-controlled websites…
Virtualizor has reported that malicious actors successfully executed a Border Gateway Protocol (BGP) hijack to compromise its services. The attackers exploited this BGP hijack to divert traffic intended for Softaculous, a popular one-click installer for web applications.
Cybersecurity researchers have disclosed the existence of a new Android banking trojan named StreamRat, which was actively promoted to Spanish-speaking users through a deceptive advertising campaign on Meta's platforms. ThreatFabric, a cybersecurity firm, reported that this campaign specifically targeted users…
SonicWall has issued security updates to address two critical zero-day vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series VPN appliances, which have already been exploited by malicious actors. These vulnerabilities, identified internally by SonicWall's William Perry and Adam Babis…
GeoNetwork, an open-source geospatial metadata catalog used by numerous government and agency geoportals, has addressed a critical vulnerability chain that allowed for unauthenticated remote code execution (RCE). The project released patches for this issue in versions 4.4.12 and 4.2.17…