29Articles
9Categories
2025-05-06Date
🚨
Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation EvidenceA recently disclosed critical security flaw impacting the open-source Langflow platform has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), citing evidence of active exploitation. The vulnerabili…
KEV
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose…
KEV
🐛
Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
KEV
🐛
"Mirai" Now Exploits Samsung MagicINFO CMS (CVE-2024-7399), (Mon, May 5th)
🐛
"Mirai" Now Exploits Samsung MagicINFO CMS (CVE-2024-7399)
🐛
"Mirai" Now Exploits Samsung MagicINFO CMS (CVE-2024-7399)
⚠️
Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet
⚠️
Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches
⚠️
CISA Releases Three Industrial Control Systems Advisories
⚠️
Unsophisticated Cyber Actor(s) Targeting Operational Technology
⚠️
China has found its assassin’s mace: high-altitude electromagnetic pulse (HEMP) weapons
📢
Italy: New decree prioritizes NATO countries in public tenders, sidelining Chinese and Russian tech suppliers in a bid to enhance national security
🔥
158: MalwareTech
🔥
Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware
🕵️
Fake Student Fraud in Community Colleges
🕵️
New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims
🕵️
ISC Stormcast For Tuesday, May 6th, 2025 https://isc.sans.edu/podcastdetail/9438, (Tue, May 6th)
🕵️
CyberheistNews Vol 15 #18 [Eye Opener] Sneaky New Attack. What is Device Code Phishing?
🕵️
RSAC Strategic Reel: Cyber experts on the front lines unpack ‘Shadow AI,’ ‘Ground Truth’
🕵️
Benchmarks Q&A: What the finance sector’s new X9 PKI standard signals for other industries
🕵️
InterSECt — The Fast Lane to a Secure Future Starts Here
🕵️
Basic analysis of Kidflix users’ passwords – Kinda Blog by CryptoLek
🕵️
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
🌐
Python InfoStealer with Embedded Phishing Webserver, (Tue, May 6th)
🌐
NSO Group must pay more than $167 million in damages to WhatsApp for spyware campaign
🎙️
The AI Fix #49: The typo from hell
📡
Microsoft Warns Default Helm Charts Could Leave Kubernetes Apps Exposed to Data Leaks
📡
Entra ID Data Protection: Essential or Overkill?
📡
Toll road scams are in overdrive: Here’s how to protect yourself