Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [.
Search
Results for "Deploy".
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [.
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [.
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware.
Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks.
Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role starting with the next Windows Server release.
Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor.
Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted servers.
Both YouTube and YouTube TV should now be working.
A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell directly into memory, avoiding the need to write malicious code to disk.
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor.
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.
Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers and install the ScreenConnect remote support software.
A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into running malicious PowerShell commands in Windows Terminal.
The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged.
Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.
A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD.
A practical, in-depth guide on Windows repair mode: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on Copilot privacy on Windows: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on BitLocker recovery keys: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on OneDrive sync conflicts: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on File auditing with PowerShell: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on Ransomware protection in Windows Defender: deployment guide with concrete technical steps, security configurations and verificat.
A practical, in-depth guide on A workstation with WSL: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on An older Windows PC: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on Linux server hardening: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on SSH key rotation: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on Systemd timers: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on Docker Compose backups: deployment guide with concrete technical steps, security configurations and verification methods.
A practical, in-depth guide on SMART disk monitoring: deployment guide with concrete technical steps, security configurations and verification methods.