A critical security vulnerability has been discovered in WatchGuard Firebox appliances that could allow remote attackers to execute arbitrary code without authentication. The flaw, identified […]
Attackers Exploit Zendesk Authentication Issue to Flood Targets’ Inboxes with Corporate Notifications
Cybercriminals have discovered a gap in Zendesk’s ticket submission process and are using it to bombard victims with waves of misleading support messages. When configured […]
Email Bombs Exploit Lax Authentication in Zendesk
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from […]
Critical ASP.NET core vulnerability earns Microsoft’s highest-ever severity score
Microsoft has patched a critical vulnerability in ASP.NET Core that earned a CVSS severity score of 9.9, the highest rating the company has ever assigned […]
ClickFake Interview Campaign Used by Threat Actors to Deliver OtterCandy Malware
A North Korean-linked group, WaterPlum’s Cluster B, has evolved its tactics by introducing OtterCandy—a Node.js–based RAT and information stealer—through the ClickFake Interview campaign, with significant […]
Identity Security: Your First and Last Line of Defense
The danger isn’t that AI agents have bad days — it’s that they never do. They execute faithfully, even when what they’re executing is a […]
Hackerangriff auf Stadtverwaltung Hohen Neuendorf
Cyberkriminelle haben auf Daten der Stadtverwaltung Hohen Neuendorf zugegriffen. LookerStudio – shutterstock.com Wie die Stadtverwaltung Hohen Neuendorf auf ihrer Website mitteilt, gab es kürzlich einen […]
‘Zero Disco’ campaign hits legacy Cisco switches with fileless rootkit payloads
In newly disclosed real-world attacks, threat actors are found exploiting a Cisco Simple Network Management Protocol (SNMP) vulnerability to gain remote code execution (RCE) and […]
Cyberkriminelle erbeuten Kundendaten von Modekonzern Mango
Hacker haben Kundendaten des Modekonzerns Mango gestohlen. Auch deutsche Kunden sind betroffen. Vytautas Kielaitis – shutterstock.com Kriminelle Hacker haben massenhaft persönliche Daten von Kunden des […]
New Tech Support Scam Exploits Microsoft Logo to Steal User Credentials
Microsoft’s name and branding have long been associated with trust in computing, security, and innovation. Yet a newly uncovered campaign by the Cofense Phishing Defense […]