Sydney Uni data goes walkabout after criminals raid code repo Summary The University of Sydney has confirmed unauthorised access to an online code repository that contained historical data extracts used…
WatchGuard sounds alarm as critical Firebox flaw comes under active attack Summary WatchGuard has confirmed a critical remote code execution (RCE) vulnerability in its Firebox firewalls — CVE-2025-32978 — is…
HPE tells customers to patch fast as OneView RCE bug scores a perfect 10 Summary Hewlett Packard Enterprise has warned customers to urgently patch OneView after disclosing a maximum-severity remote…
SonicWall Edge Access Devices Hit by Zero-Day Attacks Summary SonicWall disclosed a newly discovered zero-day, CVE-2025-40602, affecting the SMA1000 appliance management console (AMC). It is a medium-severity local privilege escalation…
Dormant Iran APT is Still Alive, Spying on Dissidents Summary SafeBreach has published new research revealing that “Prince of Persia” (aka Infy), Iran’s oldest known APT, has remained active for…
Dogma-defying signalling through G proteins could lead to better pain relief Summary New work discussed by Andrew B. Tobin highlights surprising behaviour in G proteins that challenges long-standing assumptions about…
React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines Summary Microsoft reports that attackers have already compromised “several hundred machines” by exploiting CVE-2025-55182 — dubbed React2Shell — a critical…
Another bad week for SonicWall as SMA 1000 zero-day under active exploit Summary SonicWall has warned of an actively exploited zero-day in its SMA 1000 Secure Mobile Access appliance management…
Chinese attackers exploiting zero-day to target Cisco email security products Summary Cisco disclosed that Chinese threat actors have been exploiting a critical zero-day (CVE-2025-20393) in its AsyncOS-based email management appliances…
Crypto crooks co-opt stolen AWS creds to mine coins Summary Attackers have been using stolen AWS Identity and Access Management (IAM) credentials with admin-like privileges to run illicit cryptocurrency miners…
