91Articles
8Categories
2025-06-06Date
🚨
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalogsubmitted by kid to cybersecurity 1 points | 0 comments https://securityaffairs.com/178678/security/u-s-cisa-google-chromium-v8-flaw-known-exploited-vulnerabilities-catalog.html
KEV
🐛
Hackers Exploit Roundcube Vulnerability to Steal User Credentials via XSS Attack
🐛
PoC Exploit Released for Apache Tomcat DoS Vulnerability
🐛
Critical FreeRTOS-Plus-TCP Flaw Allows Code Execution or System Crash
🐛
Critical RCE Vulnerability in AWS Amplify Studio – PoC Now Public
🐛
New Mirai Variant Exploits TBK DVR Flaw for Remote Code Execution
🐛
Microsoft Unveils European Security Effort to Disrupt Cybercrime Networks
KEV
⚠️
CISA asks CISOs: Does that asset really have to be on the internet?
⚠️
Cyber Extortion, Ukraine's Cyber Offensive, and Chrome Trust Shake-up
⚠️
Paste.ee Turned Cyber Weapon: XWorm and AsyncRAT Delivered by Malicious Actors
⚠️
BADBOX 2.0 Malware Hits Over a Million Android Devices in Global Cyber Threat
⚠️
Police arrests 20 suspects for distributing child sexual abuse content
⚠️
HPE Patches Critical Vulnerability in StoreOnce
⚠️
Critical RCE Flaw Found in HPE Insight Remote Support Tool
⚠️
Chrome Extensions Flaw Exposes Sensitive API Keys, Secrets and Tokens
⚠️
Cisco Patches Critical ISE Vulnerability With Public PoC
⚠️
Colossal breach exposes 4B Chinese user records in surveillance-grade database
⚠️
New phishing campaign hijacks clipboard via fake CAPTCHA for malware delivery
⚠️
Fake MFA Reset Warning Message
⚠️
PoC Exploit Released for Apache Tomcat DoS Vulnerability
⚠️
New Zero-Click iPhone Exploit “NICKNAME” Targeted High-Profile Individuals Across the US and EU
⚠️
Microsoft startet neues europäisches Sicherheitsprogramm
⚠️
Critical Fortinet flaws now exploited in Qilin ransomware attacks
⚠️
Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam
⚠️
Scattered Spider Hackers Target Tech Company Help-Desk Administrators
⚠️
Report on the Malicious Uses of AI
⚠️
Marks & Spencer’s ransomware nightmare – more details emerge
⚠️
DragonForce Ransomware Reportedly Compromised Over 120 Victims in the Past Year
⚠️
ClickFix Attack Uses Fake Cloudflare Verification to Silently Deploy Malware
⚠️
Hundreds of Malicious GitHub Repos Targeting Novice Cybercriminals Traced to Single User
⚠️
Hackers Leverage New ClickFix Tactic to Exploit Human Error with Deceptive Prompts
⚠️
HPE Insight Remote Support Vulnerability Let Attackers Execute Remote Code
⚠️
Microsoft shares script to restore inetpub folder you shouldn’t delete
⚠️
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
⚠️
The Command That Causes a Core Dump 💥 #LinuxHack
⚠️
Critical Fortinet flaws now exploited in Qilin ransomware attacks
⚠️
Cyber Godzilla Can’t Be Tracked… Unless THIS Happens
📢
CISOs urged to push vendors for roadmaps on post-quantum cryptography readiness
📢
Don’t give hacktivists what they really want
📢
New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack
📢
U.S. Offers $10M Bounty for Information on RedLine Malware Creator
📢
In Other News: FBI Warns of BadBox 2, NSO Disputes WhatsApp Fine, 1,000 Leave CISA
📢
HPE security advisory (AV25-320)
📢
Jenkins security advisory (AV25-321)
📢
Android security advisory – June 2025 monthly rollup (AV25-322)
🔥
New pathWiper Malware Targets Critical Infrastructure to Deploy Admin Tools
🔥
ANY.RUN Empowers Government Agencies with Real-Time Threat Detection
🔥
Beware: Fake AI Business Tools Spreading Hidden Ransomware
🔥
Kettering Health confirms Interlock ransomware behind cyberattack
🔥
Tax resolution firm Optima Tax Relief hit by ransomware, data leaked
🔥
Hearing on the Federal Government and AI
🔥
Kettering Health confirms Interlock ransomware behind cyberattack
🔥
Threat Actors Using ViperSoftX Malware to Exfiltrate Sensitive Details
🕵️
Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies
🕵️
ISC Stormcast For Friday, June 6th, 2025 https://isc.sans.edu/podcastdetail/9482, (Fri, Jun 6th)
🕵️
US Offering $10 Million Reward for RedLine Malware Developer
🕵️
Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure
🕵️
MIND Raises $30 Million for Data Loss Prevention
🕵️
UK tax authority reveals scammers stole £47 million | The Record from Recorded Future News
🕵️
FBI: BADBOX 2.0 Android malware infects millions of consumer devices
🕵️
Unsecured Database Exposes Data of 3.6 Million Passion.io Creators
🕵️
Cybersecurity M&A Roundup: 42 Deals Announced in May 2025
🕵️
What Are The Key Components Of A Successful Human Risk Management Program?
🕵️
AI-Powered Website Cloning: Same Tool Enables Automated Phishing at Scale
🕵️
Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hard-Coded Credentials
🕵️
Old AT&T data leak repackaged to link SSNs, DOBs to 49M phone numbers
🕵️
Nearly 94 Billion Stolen Cookies Found on Dark Web
🕵️
Proxy Services Feast on Ukraine’s IP Address Exodus – Krebs on Security
🕵️
Iranian APT 'BladedFeline' Hides in Network for 8 Years
🕵️
ViperSoftX Malware Used by Threat Actors to Steal Sensitive Information
🕵️
Off-Topic Friday
🕵️
New Rust-Developed InfoStealer Drains Sensitive Data from Chromium-Based Browsers
🕵️
New Chaos RAT Targets Linux and Windows Users to Steal Sensitive Data
🕵️
Booking.com reservation abused as cybercriminals steal from travelers | Malwarebytes
🕵️
Pro-Russia group hits Ukraine with fresh wiper malware • The Register
🕵️
Scattered Spider Uses Tech Vendor Impersonation to Target Helpdesks - Infosecurity Magazine
🕵️
Stack Overflow = Hacker Superpower 🤯
🕵️
Friday Squid Blogging: Squid Run in Southern New England
🕵️
Elsa, Redline, ChaosRat, iMessage, Bladed Feline , Aaran Leyland, and More... - SWN #483
🕵️
Stay Ahead of Cyber Threats Sweeping Container Telemetry data
🌐
US offers $10 million reward for tips about state-linked RedLine hackers
🌐
New PathWiper data wiper malware hits critical infrastructure in Ukraine
🌐
Italian lawmakers say Italy used spyware to target phones of immigration activists, but not against journalist
📡
Upcoming DShield Honeypot Changes and Customizations, (Fri, Jun 6th)
📡
Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV
📡
Empower Users and Protect Against GenAI Data Loss
📡
NEOM McLaren Formula E Team & Trend Micro Innovation History
📡
Human vs AI: Who Fixes Code Faster?
📡
Blindfolded Dart Throws? The Truth About AI in Software Security 🎯
📡
Anthropic appoints a national security expert to its governing trust
📡
How Google’s Wiz Acquisition Impacts CNAPP