Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 7h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilities in Slican telephone exchanges · 9h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 12h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 12h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 3h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 6h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 7h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 7h Vulnerability in Sparx Systems Enterprise Architect software · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilities in Slican telephone exchanges · 9h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 12h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 12h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 12h
🛡️
ACyber Sentinel Security Assessment Team

Latest Intelligence — Page 2 of 5

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate...

📰 The Hacker News 🕐 Oct 06
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downl...

📰 The Hacker News 🕐 Oct 06
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

LOST IN TRANSLATION Trust gaps in the new protocol spread malicious prompts from one agent to another. Credit: Getty Images The adoption of AI agents in million...

📰 Ars Technica 🕐 Oct 05
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

4 Min ReadSource: Nikola Fific via ShutterstockResearchers have uncovered a new Linux malware strain that exploits a growing list of known vulnerabilities in In...

📰 Dark Reading 🕐 Oct 05
Belgische overheidsinstantie Belnet gehackt via Fortinet-zerodaylek

Belgische overheidsinstantie Belnet gehackt via Fortinet-zerodaylek

De Belgische overheidsinstantie Belnet is eerder dit jaar gehackt via een zerodaylek in Fortinet FortiMail, waarbij aanvallers maandenlang e-mails wisten te ste...

📰 security.nl 🕐 Oct 05
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep fin...

📰 The Hacker News 🕐 Oct 05
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deplo...

📰 The Hacker News 🕐 Oct 05
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial in...

📰 The Hacker News 🕐 Oct 05
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in quest...

📰 The Hacker News 🕐 Oct 05