Hewlett-Packard Enterprise (HPE) has released security updates to address a critical security flaw affecting Instant On Access Points that could […]
Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access Read More »
A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based
The financially motivated threat actor known as EncryptHub (aka LARVA-208 and Water Gamayun) has been attributed to a new campaign
A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack Read More »
A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier
Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers Read More »
Summary Microsoft is aware of active attacks targeting on-premises SharePoint Server customers. The attacks are exploiting a variant of CVE-2025-49706.
Customer guidance for SharePoint vulnerability CVE-2025-53770 Read More »
Cybersecurity researchers have shed light on a mobile forensics tool called Massistant that’s used by law enforcement authorities in China
Multiple sectors in China, Hong Kong, and Pakistan have become the target of a threat activity cluster tracked as UNG0002
UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns Read More »
