This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into […]
A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, […]
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. The […]
The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. However, the most reliable entry […]
Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware hosted on Hugging Face Spaces. Attacks leveraging […]
The Cybersecurity and Infrastructure Security Agency (CISA) is giving U.S. federal agencies four days to patch a serious vulnerability in Ivanti EPMM that has been […]
Attackers have been leveraging a previously unknown vulnerability in Adobe Reader through malicious PDFs, with activity dating back to at least December. Security researcher Haifei […]
Claude, a new AI assistant, helped discover flaws in the popular text editors Vim and GNU Emacs. These flaws allow attackers to remotely execute code […]
F5 Networks, a cybersecurity company, has changed the classification of a BIG-IP APM denial-of-service (DoS) vulnerability, now considering it a critical remote code execution (RCE) […]
The Coruna exploit kit is an updated version of the framework seen in the Operation Triangulation spying campaign, which in 2023 exploited iPhones with zero-click […]
© Bulletproof Servers. All rights reserved.