cyberintel.kalymoon.com · 34010 articles · updated every 4 hours · grows forever
A vulnerability was found in Trend Micro TrendAI Apex One and TrendAI Apex One as a Service . It has been classified as critical . This vulnerability affects unknown code. The manipulation leads to or…
A vulnerability was found in Trend Micro TrendAI Apex One and TrendAI Apex One as a Service . It has been declared as critical . This issue affects some unknown processing. The manipulation results in…
A vulnerability was found in Turkiye Electricity Transmission Corporation Mobile Application up to 1.12 . It has been rated as problematic . Impacted is an unknown function. This manipulation causes i…
A vulnerability categorized as problematic has been discovered in Turkiye Electricity Transmission Corporation Mobile Application up to 1.12 . The affected element is an unknown function. Such manipul…
A vulnerability identified as critical has been detected in Uncrustify . The impacted element is the function check_template function/tokenize_cleanup of the file check_template.cpp . Performing a man…
Learn how intelligence-led programs address the "vulnerability flood" and win the board conversation by prioritizing and fixing what actually matters.
Recently, Rob wrote about a tool, Proxifier, that can intercept requests from specific processes. Proxifier is available for Windows, macOS, and Android. But I have not seen a generic Linux option yet…
Also: Hackers Stole From Verus Bridge, ThorChain and Echo Protocol This week, Forsage's co-founder was extradited to the U.S. over a $340M scam, hackers stole from Verus Bridge, ThorChain and Echo Pro…
A well-known botnet is now targeting cloud environments in a more calculated way than before. P2PInfect, a Rust-written peer-to-peer malware active since mid-2023, has been observed compromising Kuber…
Flipper Devices has unveiled Flipper One, a modular Linux cyberdeck aimed at becoming a fully open, mainline-first ARM platform for hackers, researchers, and makers The company says the new device is …
AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers
A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace
First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol
GitHub CISO Alexis Wales has named the malicious VS Code extension behind the breach they suffered at the hands of the threat group TeamPCP: Nx Console, a popular developer tool with 2.2 million insta…
First VPN, a virtual private network service marketed to cybercriminals, promising anonymity for its users, was taken offline on May 19 and 20 as part of Operation Saffron. During the operation, Frenc…
Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges. The post Cisco Patches Critical Vulnerability in Secure Workload appe…
The Underminr domain-fronting attack allows threat actors to modify Web requests and leverage trusted websites to cloak malicious activity.
"Showboat" doesn't show off, but clearly it doesn't need to, as it's long helped China spy on small market communications providers.
AI agent projects are proliferating throughout the enterprise, and those AI agent identities require management, security, and governance. New Omdia research shows the AI agent identity budget dynamic…
This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At first, it feels like the usual mess. Then you see the pattern: attackers are not alwa…
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications provider in the Middle East since at least…
A virtual private network service called 'First VPN,' used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation. [...]
Cisco has released security updates to address a maximum-severity vulnerability in Secure Workload that allows attackers to gain Site Admin privileges. [...]