Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco has issued security patches to fix a critical vulnerability in the Identity Services Engine (ISE), which could enable unauthenticated ...
Tag: cyber attacks
HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass
Hewlett Packard Enterprise (HPE) has issued security updates to fix up to eight vulnerabilities in its StoreOnce data backup and ...
Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues
Google has announced that it will stop trusting digital certificates issued by Chunghwa Telecom and Netlock due to "patterns of ...
New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
Google has released out-of-band fixes for three security vulnerabilities in its Chrome browser, one of which is being actively exploited. ...
U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation
A multinational law enforcement operation has successfully dismantled an online cybercrime syndicate that provided services to threat actors, enabling their ...
Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas
SummaryMeta announced the disruption of three covert influence operations from Iran, China, and Romania during Q1 2025, as detailed in ...
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints
The DragonForce ransomware group compromised a Managed Service Provider's (MSP) SimpleHelp remote monitoring and management (RMM) tool, using it to ...
Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations
Google reported that the Chinese state-sponsored threat actor APT41 utilized a malware named TOUGHPROGRESS, which exploits Google Calendar for command-and-control ...
Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers
Threat hunters have identified a new campaign utilizing SEO poisoning techniques to target employee mobile devices for payroll fraud. Detected ...
Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents
The Russia-aligned threat actor TAG-110 has initiated a spear-phishing campaign aimed at Tajikistan, utilizing macro-enabled Word templates as the initial ...
News Summarized. Time Saved. Bite-sized news briefs for busy people. No fluff, just facts.