exploits

The commission failed to patch its on-premise Microsoft Exchange Server against the ProxyShell flaws.  ​ Read More  ​ 

Nine significant ModiLoader phishing campaigns were detected in May 2024.  ​ Read More  ​ 

CVE-2024-37085 allows attackers to obtain full administrative permissions on domain-joined ESXi hypervisors.  ​ Read More  ​ 

The group employs a variety of techniques to evade detection and deliver  the implants.  ​ Read More  ​ 

A threat actor gained access to an internal collaboration tool on the bank partner’s system.  ​ Read More  ​ 

Hackers managed to bypass verification, enabling unauthorized access to third-party services through Google’s single sign-on system.  ​ Read More  ​ 

Additionally, Hive0137 appears to use Generative AI for creating its tooling.  ​ Read More  ​ 

The threat actor uses a modified XMRig miner packed with custom UPX headers.  ​ Read More  ​ 

In brief: A North Korean hacker indicted for ransomware attacks, French police dismantle the PlugX botnet, and more.  ​ Read More  ​ 

The operation is using over 3,000 fake GitHub accounts.  ​ Read More  ​ 

The threat actor has been observed targeting critical infrastructure more frequently than other North Korean hackers.  ​ Read More  ​ 

FortiGuard Labs has detected this campaign targeting users in North America, Spain, and Thailand.  ​ Read More  ​ 

The discovered documents indicate the hackers' interest in financial-economic indicators, taxation, and local government reform.  ​ Read More  ​ 

A bug in the Content Validator allowed the faulty update to pass validation checks and be deployed into production.  ​ Read More  ​ 

The primary focus of Russian cyber efforts now includes hacking frontline devices used by Ukrainian soldiers.  ​ Read More  ​