Risks of OOB Access via IP KVM Devices
Recently, a new “breed” of IP-based KVM devices has been released. In the past, IP-based KVM devices required dedicated “server-grade” hardware using IPMI. They often cost several $100 per server a...
ictsec.pl
NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data
A hacker using the alias 1011 has claimed to breach a NordVPN development server, posting what appears to be database dumps and configuration samples on the latest version of BreachForums. The leak...
New Zealand orders review into ManageMyHealth cyberattack
New Zealand health minister Simeon Brown has ordered a review into the cyberattack at ManageMyHealth. Brown told reporters on Monday that he asked the government to begin reviewing the incident, in...
Knownsec leak unmasks secret cyberweapons and role in China’s state-linked spying
A leak from Knownsec, a major Chinese cybersecurity firm, exposes how the firm operated far beyond the role of a conventional defense vendor. It combined the development of cyberweapons with large-...
China's guardian of secrets 保密管理系统
Join us on a deep dive into an electronic detection and response system deployed by China’s security agencies to prevent the leakage of confidential documents from government workstations. The tool...
Infostealers Enable Attackers to Hijack Legitimate Business Infrastructure for Malware Hosting
A dangerous cybercrime feedback loop has emerged where stolen credentials from infostealer malware enable attackers to hijack legitimate business websites and turn them into malware distribution pl...
Hackers claim to hack Resecurity, firm says it was a honeypot
Threat actors associated with the “Scattered Lapsus$ Hunters” (SLH) claim to have breached the systems of cybersecurity firm Resecurity and stolen internal data, while Resecurity says the attackers...
2026-01-02 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-12245 n/a - chatwoot A...
2025-12-26 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-68920 kermitproject - C-Kerm...
2025-12-24 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2021-47720 Orangescrum - orangesc...
Prince of Persia ran a covert Iranian spy campaign for over a decade
For nearly two decades, an Iran-backed hacking group, known as Prince of Persia, has quietly operated since 2007, targeting governments, critical infrastructure, and dissidents of the Iranian regim...
Hackers attack WatchGuard Firebox firewalls 120K IPs exposed and vulnerable
With hackers already knocking at the gates, around 120,000 WatchGuard Firebox firewalls, which protect thousands of companies, remain unpatched and vulnerable to a critical flaw, according to the l...
Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan
A popular software tool used by website owners to check their server’s health is now being used by hackers to take complete control of computers. Researchers at the cybersecurity firm Ontinue have ...
BlindEagle Hackers Attacking Government Agencies with Powershell Scripts
BlindEagle, a South American threat group, has launched a sophisticated campaign against Colombian government agencies, demonstrating an alarming evolution in attack techniques. Remarkably, the phi...
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale
Threat actors have been observed leveraging malicious dropper apps masquerading as legitimate applications to deliver an Android SMS stealer dubbed Wonderland in mobile attacks targeting users in U...
2025-12-22 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2023-25068 Mapro Collins - Magazi...
Massive Android botnet Kimwolf infects millions, strikes with DDoS
Kimwolf is a newly discovered Android botnet linked to the Aisuru botnet that has infected over 1.8 million devices and issued more than 1.7 billion DDoS attack commands, according to XLab. The Ki...
Cloud Atlas activity in the first half of 2025 what changed
Known since 2014, the Cloud Atlas group targets countries in Eastern Europe and Central Asia. Infections occur via phishing emails containing a malicious document that exploits an old vulnerability...
Russia was behind a destructive cyber attack on a water utility in 2024, Denmark says
FE assesses that the pro-Russian group Z-Pentest, responsible for a destructive cyberattack against a Danish waterworks in 2024, has connections to the Russian state. They also assess that the grou...
RansomHouse upgrades encryption with multi-layered data processing
The RansomHouse ransomware-as-a-service (RaaS) has recently upgraded its encryptor, switching from a relatively simple single-phase linear technique to a more complex, multi-layered method. RansomH...