CISA – Threat Note

From Dark Reading – Salt Typhoon: A Wake-up Call for Critical Infrastructure

The Salt Typhoon attacks underscored the need for unity, innovation, and resilience in the face of an increasingly sophisticated cyber-threat landscape. Read More

shaikh Saqib March 13, 2025

News

From Dark Reading – 3 VMware Zero-Day Bugs Allow Sandbox Escape

The now-patched bugs are under active exploit and enable attackers to carry out a wide range of malicious activities, including escaping a virtual machine and gaining access to the underlying…

shaikh Saqib March 5, 2025

News

From Dark Reading – GreyNoise Intelligence Releases New Research on Cybersecurity Vulns

shaikh Saqib March 5, 2025

News

From Dark Reading – Serbian Police Hack Protester’s Phone With Cellebrite Exploit Chain

Amnesty International said Serbian police used an exploit chain in tandem with legitimate mobile extraction dongle from vendor Cellebrite in an attack that brings up questions around ethical technology development. Read…

shaikh Saqib March 5, 2025

News

From Dark Reading – Pentagon, CISA Deny Change in US Cyber Policy on Russia

Media reports over the weekend suggested the Trump administration ordered US Cyber Command and CISA to draw down cyber activities targeting Russia. Read More

shaikh Saqib March 5, 2025

Articles

From Graham Cluley – CISA refutes claims it has been ordered to stop monitoring Russian cyber threats

It's been a confusing few days in the world of American cybersecurity... Read more in my article on the Hot for Security blog. Read More

shaikh Saqib March 4, 2025

Vulnerabilities

From Cybersecurity Help – Three zero-day flaws in VMware ESXi, Workstation, and Fusion exploited in the wild

Google has rolled out its monthly Android Security Bulletin for March 2025 to fix over 40 vulnerabilities, including two zero-days. Read More

shaikh Saqib March 4, 2025

Articles

From Graham Cluley – Stop targeting Russian hackers, Trump administration orders US Cyber Command

The Trump administration has told US cyber command and CISA to stop following or reporting on Russian cyber threats. Yes, Russia! That country everyone used to agree was home to…

shaikh Saqib March 3, 2025

News

From Cyber Security News – HiveOS Vulnerabilities Let Attackers Execute Arbitrary Commands

Security researchers have uncovered three critical vulnerabilities in Extreme Networks’ IQ Engine (HiveOS) that collectively enable authenticated attackers to escalate privileges, decrypt passwords, and execute arbitrary commands on affected systems. …

shaikh Saqib March 3, 2025

Vulnerabilities

From Cybersecurity Help – Trump administration to halt offensive cyber ops against Russia

Defense Secretary Pete Hegseth has directed Cyber Command to halt any operations aimed at countering Russian cyber activities. Read More

shaikh Saqib March 3, 2025

News

From Cyber Security News – BlackBastaGPT – A ChatGPT Powered Tool to Uncover Ransomware Group Tactics

A new AI-powered chatbot, BlackBastaGPT, trained on over 1 million leaked internal messages from the Black Basta ransomware gang. Hudson Rock released the tool just days after the unprecedented data…

shaikh Saqib February 23, 2025

Vulnerabilities

From Cybersecurity Help – Recently patched PAN OS firewall bug actively exploited in the wild

GreyNoise had detected exploit attempts originating from nearly 30 unique IP addresses. Read More

shaikh Saqib February 19, 2025

News

From Security Week – Sean Cairncross is Trump Nominee for National Cyber Director

[[{"value":"Former RNC official Sean Cairncross has been nominated for the post of National Cyber Director to streamline the US cybersecurity strategy. The post Sean Cairncross is Trump Nominee for National…

Samir K February 14, 2025

News

From Dark Reading – XE Group Shifts From Card Skimming to Supply Chain Attacks

The likely Vietnam-based threat actor has been using two zero-days in VeraCore's warehouse management software in some of its latest cyberattacks. Read More

shaikh Saqib February 11, 2025