Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of […]
SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers Read More »
When we talk about identity in cybersecurity, most people think of usernames, passwords, and the occasional MFA prompt. But lurking
Why NHIs Are Security’s Most Dangerous Blind Spot Read More »
Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable
Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers Read More »
Cybersecurity researchers are warning about a new malware called DslogdRAT that’s installed following the exploitation of a now-patched security flaw
DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks Read More »
Welcome to this week’s edition of the Threat Source newsletter. “Be curious, not judgmental,” Ted Lasso says, misattributing Walt Whitman.
Lessons from Ted Lasso for cybersecurity success Read More »
Be careful when talking to people you’ve not met with before over the Zoom video conferencing system; you might get
Be careful when talking to people you’ve not met with before over the Zoom video conferencing system; you might get
Hey there, I hope you’ve been doing well! 👋 Come see my BSidesSF keynote! Shorter issue this week due to
[tl;dr sec] #276 – AI-created PoC Exploit, Cloud Snitch, Kubernetes Attack Simulation Read More »
At least six organizations in South Korea have been targeted by the prolific North Korea-linked Lazarus Group as part of
