Workday Breach Likely Linked to ShinyHunters Salesforce Attacks Summary Human-resources platform Workday confirmed a social-engineering breach of a third-party CRM system that likely ties into a series of attacks attributed…
How Evolving RATs Are Redefining Enterprise Security Threats Summary Remote Access Trojans (RATs) have shifted from crude, noisy tools into stealthy, persistent threats that hide in plain sight. Recent examples…
Internet-wide Vulnerability Enables Giant DDoS Attacks Summary Researchers at Tel Aviv University have disclosed “MadeYouReset”, a technique that bypasses the 2023 Rapid Reset mitigation for HTTP/2 and can enable very…
‘DripDropper’ Hackers Patch Their Own Exploit Summary An attacker campaign is exploiting a nearly two-year-old critical remote code execution vulnerability (CVE-2023-46604) in Apache ActiveMQ to compromise Linux servers. After gaining…
Noodlophile Stealer Hides Behind Bogus Copyright Complaints Summary Research from Morphisec details an evolution in the Noodlophile info‑stealer campaign that now uses bogus copyright complaints aimed at corporate social media…
Millions Allegedly Affected in Allianz Insurance Breach Summary The article reports that the Allianz Life data breach, confirmed in July, may have exposed the personal information of roughly 1.1 million…
PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain Summary Researchers and Microsoft Threat Intelligence (MTI) have observed the Play ransomware group (tracked as Storm-2460) deploying the PipeMagic modular…
10 Major GitHub Risk Vectors Hidden in Plain Sight Summary GitHub is no longer just version control — it’s embedded across the entire software development life cycle. OX Security’s research…
‘RingReaper’ Sneaks Right Past Linux EDRs Summary RingReaper is a post‑compromise Linux implant that weaponises the kernel’s io_uring asynchronous I/O interface to evade endpoint detection and response (EDR) tools. First…
AI Agents Access Everything, Fall to Zero-Click Exploit Summary At Black Hat USA 2025 Zenity CTO Michael Bargury revealed research showing how modern enterprise AI assistants and agents can be…
