June 2025 marks the 11th anniversary of Project Galileo, Cloudflare’s initiative to provide free cybersecurity protection to vulnerable organizations working […]
Celebrating 11 years of Project Galileo’s global impact Read More »
ConnectWise has disclosed that it’s planning to rotate the digital code signing certificates used to sign ScreenConnect, ConnectWise Automate, and
ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks Read More »
Cybersecurity researchers have uncovered a new account takeover (ATO) campaign that leverages an open-source penetration testing framework called TeamFiltration to
Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool Read More »
A data broker owned by some of America’s biggest airlines has been selling access to customer flight data to the
US airline industry quietly selling flight data to DHS Read More »
In a Senate hearing adequately titled “23 and You: The Privacy and National Security Implications of the 23andMe Bankruptcy,” 23andMe
23andMe raked by Congress on privacy, sale of genetic data Read More »
Former members tied to the Black Basta ransomware operation have been observed sticking to their tried-and-tested approach of email bombing
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks Read More »
TL;DR If you only have access to a valid machine hash, you can leverage the Kerberos S4U2Self proxy for local
Abusing S4U2Self for Active Directory Pivoting Read More »
Threat intelligence firm GreyNoise has warned of a “coordinated brute-force activity” targeting Apache Tomcat Manager interfaces. The company said it
295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager Read More »
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel,
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities Read More »
