Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability

CISA: Hackers still exploiting older Ivanti bugs to breach networks

bleepingcomputer.com - 23/Jan 16:51

CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws patched since September to...

Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations

securityaffairs.co - 22/Jan 20:48

Two ransomware groups exploiting Microsoft 365 services and default settings to target internal enterprise users. Sophos researchers started...

Are Chinese devices a security threat in Aussie homes?

ia.acs.org.au - 22/Jan 21:50

Experts identify smart doorbell allegedly compromised by hackers.

Chinese threat actors used two advanced exploit chains to hack Ivanti CSA

securityaffairs.co - 23/Jan 14:23

US agencies revealed Chinese threat actors used two advanced exploit chains to breach Ivanti Cloud Service Appliances (CSA). The US government’s...

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

securityaffairs.co - 14/Jan 12:20

Experts warn of a new campaign targeting an alleged zero-day in Fortinet FortiGate firewalls with management interfaces exposed online. Arctic Wolf...

U.S. CISA adds SonicWall SMA1000 flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 20:01

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA1000 vulnerability to its Known Exploited Vulnerabilities catalog. The...

Hackers get $886,250 for 49 zero-days at Pwn2Own Automotive 2025

bleepingcomputer.com - 13:00

The Pwn2Own Automotive 2025 hacking contest has ended with security researchers collecting $886,250 after exploiting 49 zero-days. [...]

Hackers exploit critical Aviatrix Controller RCE flaw in attacks

bleepingcomputer.com - 13/Jan 17:57

Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install...

U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 13/Jan 22:10

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities...

Google Chrome fixes 16 flaws with the latest version

thecyberthrone.in - 15/Jan 12:38

Google has released version 132.0.6834.83/84 of its Chrome browser on January 14, 2025. This update addresses several critical security...

Rubriques :