cyberintel.kalymoon.com · 46294 articles · updated every 4 hours · grows forever
A vulnerability marked as problematic has been reported in VMware Spring Cloud Gateway up to 4.2.0 . Impacted is an unknown function of the component SSL Bundle Configuration Handler . The manipulatio…
A vulnerability described as critical has been identified in Notepad++ up to 8.9.3 . The affected element is an unknown function of the component File Drop Handler . The manipulation results in stack-…
A vulnerability classified as problematic has been found in OpenStack Skyline up to 5.0.0/6.0.0/7.0.0 . The impacted element is an unknown function of the component Console Web Interface . This manipu…
A vulnerability classified as problematic was found in Checkmk up to 2.4.0p25/2.5.0b3 . This affects an unknown function of the component Notification Test Page . Such manipulation leads to improper n…
A vulnerability, which was classified as critical , has been found in Checkmk up to 2.3.0p46/2.4.0p25/2.5.0b3 . This impacts an unknown function of the component Livestatus Command Handler . Performin…
A vulnerability, which was classified as critical , was found in Checkmk up to 2.5.0b3 . Affected is an unknown function of the component Monitoring Quicksearch . Executing a manipulation can lead to …
Austin, Texas, United States, April 9th, 2026, CyberNewswire Built by a veteran security team and led by a former Google and Mandiant executive, Mallory delivers intelligence that drives action for en…
A fake developer extension published on the OpenVSX marketplace is silently spreading a known malware strain called GlassWorm to every code editor installed on a developer’s machine. The malicious pac…
The cpuid-dot-com website, home to widely used system utilities CPU-Z and HWMonitor, is at the center of an active supply chain security incident. Users downloading HWMonitor 1.63 or CPU-Z ZIPs since …
Cybersecurity researchers have identified five distinct security flaws in the TP-Link Archer AX53 v1.0 router. Tracked under multiple CVE identifiers, these vulnerabilities impact the router’s core mo…
Iranian state-backed hacking group MuddyWater has made a decisive operational shift, adopting a Russian-built Malware-as-a-Service platform to power a new campaign against Israeli targets. The operati…
Chrome’s Device Bound Session Credentials is designed to block infostealers from harvesting session cookie
Qilin, Akira and Dragonforce were responsible for 40% of 672 ransomware incidents reported in March, says Check Point
Cybersecurity Maturity Model Certification 2.0 ( CMMC 2.0 ) is pushing federal contractors to demonstrate, not just assert, that they can protect sensitive government data. Eligibility for contracts n…
Federal cybersecurity spending will decline in 2027 under Donald Trump’s proposed budget, with uneven shifts across agencies, as some see sizable increases while others face sharp reductions. Accordin…
Zero trust has become one of the most widely adopted security models in enterprise environments. Organizations invest heavily in identity systems, access policies, and modern security tooling. On pape…
Anthropic’s Claude dug up a critical remote code execution (RCE) bug that sat quietly inside Apache ActiveMQ Classic for over a decade. Researchers at Horizon3.ai say that it only took minutes for the…
The Apiiro CLI brings the Apiiro platform to your terminal and to your AI coding assistants, giving them six native security capabilities: scanning, risk management, remediation, an AI security analys…
Network monitoring on Linux has long been a gap for users who want per-process visibility into outbound connections. Existing tools either operate at the command line or were designed for server secur…
Cookie theft follows a well-established pattern. Infostealer malware infiltrates a device, extracts authentication cookies, and exfiltrates them to an attacker-controlled server. Because cookies often…
Google has expanded Gmail client-side encryption to Android and iOS devices, allowing users to engage with their organization’s most sensitive data on mobile devices while ensuring data remains compli…
A financially motivated hacking group is targeting Canadian employees with a sophisticated campaign designed to covertly redirect their salary payments into attacker-controlled bank accounts, Microsof…
Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild. The post Critical Marimo Flaw Exploited Hours After Public Disclosure appeared fi…
The document provides a behavior-based model of the tactics and techniques employed by fraudsters. The post MITRE Releases Fight Fraud Framework appeared first on SecurityWeek .