Microsoft SharePoint Vulnerability Fuels New Ransomware Campaigns
CISA confirms active exploitation of a high-severity Microsoft SharePoint RCE now used in ransomware intrusions and lateral movement.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, August 12
Research Unveils USB Exploit Leading to SYSTEM Access on Windows 11
Windows Plug and Play abuse can fetch signed vendor software and escalate to SYSTEM on fully updated Windows 11 via USB emulation.
Malicious SIM Cards Exploit Cellular IoT Devices Through Vulnerable Modems
Malicious SIM cards can run attacker code on cellular modems inside EV chargers, industrial routers, and telematics units, enabling device takeover.
Zoom Addresses Critical Security Vulnerabilities with New Patches
Zoom patches a zero-click annotation vulnerability that could let meeting participants execute code on other attendees' devices.
Ceva Logistics Data Breach Disrupts European Supply Chain
Ceva Logistics suffers supply-chain data breach, disrupting warehouse operations and impacting multiple European retail customers.
Cyberattack on Polish Power Plant Reveals Vulnerabilities in Private Cellular Networks
Attackers used a private cellular network to intrude on a Polish heat-and-power plant, shutting a steam turbine and disrupting treatment systems.
Chrome Extension Returns with Malicious Intent After Removal
A Chrome extension removed for stealing AI chats returned to the Web Store and resumed malicious activities — immediate remediation recommended.
Metabase Zero-Day Flaw Threatens Data Security Across Multiple Platforms
Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.
Gunra Ransomware Exploits Firewall and VPN Vulnerabilities
US and South Korean agencies warn of Gunra exploiting firewall and VPN flaws to hit government and critical infrastructure.
Microsoft's August Security Update Tackles Over 400 Vulnerabilities, Highlights Three Zero-Day Exploits
Microsoft released massive August updates covering hundreds of CVEs, including multiple zero-days — prioritize exploited and high-impact fixes.
Monday, August 10
Windows Hello for Business Vulnerability Enables Stealthy Entra ID Access
PremiumMalware running in a signed Windows session can quietly use Windows Hello for Business keys to authenticate to Entra ID and persist.
Ransomware Attacks Spike in July, Targeting Key Sectors
PremiumRansomware incidents spiked in July, with finance, technology and healthcare disproportionately targeted per report.
Critical Vulnerabilities in Claude Code and Gemini CLI Expose CI Workflow Secrets
PremiumFlaws in Claude Code and Google's Gemini CLI let an unprivileged GitHub issue execute code on CI runners and expose secrets.
TeamPCP's Long-Running Cyber Attacks Unveiled
PremiumAnalysis links TeamPCP to Redis attacks from 2020 and to later supply-chain campaigns via overlapping infrastructure and domains.
TrueConf Servers Compromised: Backdoor Infiltration Discovered
PremiumThreat actors exploited unpatched TrueConf servers to replace client installers with trojanized backdoors for remote access.
Massive Malware Campaign Exploits npm Packages to Spread RAT and Infostealer
PremiumCampaign published nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer for Windows, macOS and Linux.
Atlassian's Rovo AI Vulnerability Risks Enterprise Data Exposure
PremiumVaronis found a one-click RovoBlast vulnerability that could expose Confluence, Jira and SharePoint data to attackers.
CSS Bomb Attacks Exploit Email Vulnerabilities to Steal Passwords
PremiumCSS bomb technique manipulates webmail UI to spy on user activity and capture passwords and tokens without JavaScript.
Levi Strauss Hit by Social Engineering Cyberattack
PremiumLevi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
Military Device Manufacturer Faces Cybersecurity Breach
PremiumIEH Corporation disclosed a cyberattack affecting systems tied to military device manufacturing in an SEC filing.
Get these articles delivered to your inbox.
Subscribe free