Cybersecurity News
N-able Issues N-central Hotfix 2 as Attackers Reach…
N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw…
Cybersecurity News
Critical One-Click Vulnerability in Atlassian’s Rovo AI…
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data. The post Critical…
Cybersecurity News
Hackers breach TrueConf to trojanize client installers…
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with…
Cybersecurity News
Inside the Modern SOC: The Identity Front Door
Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do to respond. The post Inside the…
Cybersecurity News
Metabase Zero-Day Exploited in Wild Allows Admin Access…
Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited…
Cybersecurity News
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to…
Cybersecurity News
Unlimited Technology Systems breach impacts 3.8 million…
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred…
Cybersecurity News
Nearly 800 Malicious npm Packages Deliver Cross-Platform…
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware…
Cybersecurity News
Metabase SQLi zero-day exploited in customer data-theft…
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact…
Cybersecurity News
In Other News: AI Slop Limits Apple Bounties, North…
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox…