Search
Results for "Attackers".
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [.
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT).
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone.
A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts.
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.
A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.
A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.
Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June.
AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing these privileged identities is becoming essential for enterprise security.
Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate accounts without stealing passwords.
US authorities have dismantled the FaceStealer campaign, a North Korean operation responsible for over $400 million in cryptocurrency theft, using sophisticated social engineering tactics.
Trezor has confirmed three Safe 5 wallets sold by CryptoBilis contain hardware implants designed to steal wallet recovery phrases. The company has released a firmware update to prevent such implants.
Check Point security gateways were targeted in PHP2Shell attacks that deployed destructive malware on VMware ESXi hosts, raising questions about a possible false-flag operation.
Check Point has released emergency hotfixes for a high-severity vulnerability that attackers have been exploiting since October to gain root privileges and establish persistence on vulnerable devices.
New worm-like malware SCKit targets MSPs, exploiting CVE-2026-84869 to spread from infected devices to MSP technicians' computers and compromise additional networks.
Hackers are actively exploiting newly disclosed N-able N-central zero-day vulnerabilities, including 4EverAble2Shell, to compromise servers and deploy cryptocurrency miners.
Apache HTTP Server has patched a critical vulnerability in the HTTP/2 module that could allow attackers to execute arbitrary code with server privileges, affecting versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42.
Security researcher Abdelhamid Naceri has released a new Windows zero-day exploit named SignDrop, which can give attackers SYSTEM privileges by abusing Microsoft's CLFS driver mitigation.
Endpoint management platforms are crucial for IT operations and security, but their administrative authority also makes them attractive targets for attackers. Learn how to protect against compromise and unauthorized access.
Hackers are increasingly using GSocket, a legitimate remote access tool, to maintain persistent access to Linux servers, even after initial vulnerabilities are patched.
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients, impacting dozens of organizations.
eMudhra has revoked eight more intermediate CA certificates after an investigation revealed improper handling of private keys, including eight compromised certificates whose keys were so weak they could be recovered easily.
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [.
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges. [.
Turla hackers have deployed a new Cereal malware toolset to intercept emails on government Microsoft Exchange servers, according to cybersecurity researchers at ESET.
AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. [.
N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers.
Crédit Mutuel Arkéa bank in France was targeted in a cyberattack, resulting in $133 million in fraudulent transactions, affecting their systems temporarily.
CTM360 exposes a global scam exploiting trusted brands, tricking users into fake reward systems.
Blockchain intelligence firm Chainalysis reports a breach exposing credentials and live tokens for all customers, affecting law enforcement, financial institutions, and cryptocurrency businesses worldwide.
