Reader view
Choose the default article length.
Page 3 of 16
A closed TLS pilot exposes the certificate-chain work ahead. Map issuers and validators, then test ML-DSA certificates across real application paths outside production.
Read article →Talos traced event invitations and altered poster QR codes to a live Google sign-in relay. Inspect the actual registration destination and review affected accounts.
Read article →Two Apex npm tools fetch executables and attacker-selected commands; one also sends coding-agent conversations to an Apex server. Find the tools and revoke exposed secrets.
Read article →CERT/CC details code-execution paths in Thelia 2.6; a separate Thelia 3 email-template flaw has a module fix. Restrict admin access and check permissions.
Read article →Plaintext instructions in malware samples shifted some model triage toward benign. Search extracted strings and keep sample text out of the scanner's instruction channel.
Read article →In a Windows ClickFix case, endpoint-side termination stopped repeated command pastes; check enforce mode and the process tree before treating an alert as a block.
Read article →Strapi user filters can disclose reset tokens. Find vulnerable releases, inspect GET requests for private-field probes and move to a patched branch.
Read article →ProFTPD's mod_copy flaw lets remote attackers read and write arbitrary files. Check reachable FTP services, command logs and distribution patches.
Read article →An enabled MPLS OAM feature exposes affected Nexus switches to crafted echo-requests; check feature state, then disable it or move to fixed NX-OS.
Read article →Enabled NGOAM exposes a packet-processing flaw on standalone Nexus 3000 and 9000 switches; two more flaws require VXLAN overlay or SRv6 features.
Read article →A backup management server became a SYSTEM-level foothold. Restrict its web interface and hunt for a fake Edge service, JSP shells and miner traffic.
Read article →Enabled NX-API on affected Nexus switches exposes an unauthenticated request path; UCS 6300 fabric interconnects have a separate credential-dependent path.
Read article →A crafted TKEY query can stop vulnerable BIND DNS servers before access controls run. Check the running build and install the vendor's patched package.
Read article →watchTowr traced a new authentication bypass and Scan-to-Fax code-execution chain through an interim PaperCut build. Check the running version and past access to its web interface.
Read article →Unit 42 traced an exploited NetScaler command-injection chain through two appliance logs into a disguised PHP shell. Preserve logs and inspect the web-server configuration.
Read article →Cisco's NX-OS hardening release covers MDS, Nexus and UCS fabric interconnects. Match device family and management mode to the first fixed build.
Read article →Showing 30–45 of 246
