Attackers Exploit Zimbra Mail Flaw to Run Server Commands
Attackers are exploiting a Zimbra SNMP flaw through crafted SMTP requests. Version 10.1.20 fixes it; exposed servers need log and file review.
Read article →network
Network activity, protocols, infrastructure, and detection.
Crafted IKEv2 Traffic Exposes Windows Hosts to Remote Code Execution
CISA says attackers are exploiting a Windows IKE remote-code flaw; verify April fixed builds and restrict UDP 500 and 4500 until every exposed host is patched.
Read article →
NetScaler SAML Flaw Lets Remote Attackers Run Code as Root
Public research turns a patched NetScaler memory overflow into a root-code-execution risk for SAML deployments, making build verification urgent.
Read article →
Attackers Exploit Cisco VPN Requests to Reload Firewalls
Exposed ASA and FTD remote-access services need release-specific hot fixes; Cisco offers no workaround for the exploited denial-of-service flaw.
Read article →
Gunra Steals Cloud Data and Deletes Backups Before Encryption
Government agencies traced Gunra from exploited edge devices through credential theft, cloud exfiltration, backup deletion, and cross-platform ransomware.
Read article →
CISA Confirms Exploitation of LoadMaster Command Injection
CISA confirms exploitation of a pre-authentication LoadMaster command-injection flaw. API-enabled appliances need a fixed release and an exposure review.
Read article →
Public Open vSwitch Exploit Gives Local Linux Users Root Access
OVSwrap exploits a 16-bit nested-action limit in the Linux kernel, leaving defenders to verify both the running fix and the earlier exposure window.
Read article →
Cisco Fixes Seven IOS XE Flaws With No Workarounds
Cisco's August IOS XE hardening release fixes seven vulnerability classes across five reviewed trains; affected devices need an upgrade.
Read article →
Malicious RTSP Server Reaches Code Execution on TP-Link TL-WR940N v6
TP-Link TL-WR940N hardware revision 6 can let an unauthenticated attacker turn a LAN client's outbound RTSP session into code execution inside the router kernel.
Read article →
INC Exploitation Makes SMA 1000 Hotfixes an Incident Triage Trigger
INC ransomware activity requires SMA 1000 operators to investigate logs and configuration as well as apply the hotfix.
Read article →
24,650 Exposed BMCs Disclosed Password Hashes Before Login
IPMI's RAKP exchange exposes material for offline password cracking, leaving defenders with a management-plane incident that host telemetry may miss.
Read article →
XLab Traces 200,000-Device Dysphoria Botnet to UPnP Relays
One variant uses UPnP to open 155 inbound paths, then relays same-port traffic through infected devices that conceal the real command servers.
Read article →
FBI Says Exposed MicroLogix PLCs Disrupted Water Operations
Actors changed controller IP addresses and passwords across at least seven states. Operators need to compare running logic with a trusted baseline and investigate activity on connected devices.
Read article →Showing 53–65 of 68