Advertisement
SonicWall SMA 1000 SSRF Under Active Attack
Attackers are exploiting a critical Server-Side Request Forgery (SSRF) vulnerability in SonicWall SMA 1000 appliances, demanding immediate patching.
ScreenConnect Client Abused in Phishing Campaigns
Threat actors are leveraging legitimate ConnectWise ScreenConnect clients in phishing campaigns to gain remote access to victim systems.
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Admin Access
CISA confirms active exploitation of CVE-2026-76504, a hex encoding vulnerability allowing unauthenticated remote admin access to Cisco Catalyst SD-WAN Manager.
Apple Screen Sharing Exploits: Secure Your macOS Systems Now
Critical vulnerabilities in Apple Screen Sharing are actively exploited, allowing system compromise. Learn how to secure macOS against these threats.
Widespread Exposure of Remote Access Services Risks Network Compromise
Security analysts observe a surge in publicly exposed VPN, RDP, and SSH services, serving as critical entry points for attackers. Learn how to secure your perimeter.
SonicWall SMA1000 Zero-Days Exploited: Custom Malware & Mitigation
Threat actors exploited zero-day flaws in SonicWall SMA1000 VPN appliances for weeks to deploy custom malware. Patch now to secure your network.
Advertisement
BeyondTrust RS/PRA Critical Authentication Bypass Flaws Addressed
BeyondTrust has issued an urgent advisory for critical authentication bypass flaws in Remote Support (RS) and Privileged Remote Access (PRA) software.
WhatsApp VBScript Campaign Installs ManageEngine RMM — Technical Guide
Attackers are targeting WhatsApp Desktop users with malicious VBScripts to install ManageEngine RMM, enabling unauthorized remote access and control.
Firestarter Backdoor Infects Cisco Firewall at US Federal Agency
Analysis of the Firestarter backdoor on Cisco firewalls, detailing its remote access capabilities, post-patch persistence, and mitigation strategies.
CVE-2024-20359: Cisco IMC Auth Bypass Grants Admin Access
Cisco IMC critical authentication bypass (CVE-2024-20359) allows unauthenticated attackers admin access. Learn about the vulnerability and urgent patch guidance.
WhatsApp VBS Malware Bypasses UAC to Hijack Windows Systems
Microsoft warns of a new campaign distributing VBS malware via WhatsApp, exploiting UAC bypass to establish persistence and remote access on Windows systems, starting…
SnappyClient C2 Implant Targets Crypto Wallets for Data Theft
A new C2 implant, SnappyClient, is actively targeting crypto wallets, facilitating remote access, extensive data theft, and persistent spying on victims.