What happened: A previously unknown state-level threat actor tracked as SilentAir has been intercepting phone calls and SMS messages by launching signaling a…
High
⚡ Featured
Critical
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
What happened: Threat actors exploited the PHP2Shell vulnerabilities and a Check Point zero-day to hack Security Gateways, deploy webshells and a backdoor, a…
High
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
What happened: Law enforcement agencies in the US, Europe, Australia, and Canada seized 235 servers and 257 domains used to distribute the Gootloader, Castle…
Critical
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
What happened: Threat actors gained unauthorized access to cloud-hosted ConnectWise ScreenConnect instances belonging to MSPs and deployed a malicious worm,…
Critical
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell
What happened: Attackers exploited unpatched Check Point Security Gateways worldwide through the Mobile Access portal, using PHP2Shell techniques, a root pri…
Critical
Trezor confirms crypto-stealing implants in three wallets, releases fix
What happened: Trezor confirmed that three Safe 5 hardware wallets sold through Southeast Asian reseller CryptoBilis contained malicious hardware implants de…
Critical
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
What happened: A newly formed Russian extortion group called n0n claims to have stolen data on nearly one billion Expedia travelers by compromising a third-p…
Critical
Apache HTTP Server patches critical HTTP/2 remote code execution flaw
What happened: The Apache Software Foundation patched a critical race condition vulnerability in the mod_http2 module of Apache HTTP Server that allows unaut…
Critical
New N-able “4EverAble2Shell” zero-day exploited hours after PoC released
What happened: Attackers began exploiting the newly released “4EverAble2Shell” N-able N-central zero-day within hours of its proof-of-concept publication, co…