This week featured several concerning security incidents. Critical software experienced unauthorized modifications. Everyday tools contained active flaws. Some attacks required minimal effort due to existing […]
Cisco Talos and Trend Micro have found that threat actors using Qilin and Warlock ransomware are employing the bring your own vulnerable driver (BYOVD) method […]
A widespread hacking campaign is underway, utilizing automation to pilfer login details by exploiting a React2Shell vulnerability (CVE-2025-55182) in susceptible Next.js applications. Compromised systems, numbering […]
Attacks taking advantage of the ‘PolyShell’ security flaw in Magento Open Source and Adobe Commerce version 2 are active, impacting over half of susceptible online […]
Scammers are exploiting Microsoft Azure Monitor alerts to distribute callback phishing emails that mimic warnings from Microsoft Security about unauthorized account charges. Azure Monitor is […]
CISA has advised U.S. government bodies to install security updates for two weaknesses in Synacor Zimbra Collaboration Suite (ZCS) and Microsoft Office SharePoint, because they […]
The threat actor group ShinyHunters (also tracked as UNC6040/UNC6240) has claimed responsibility for a new wave of data theft attacks targeting Salesforce Experience Cloud (formerly Community Cloud) sites using the Aura framework. […]
Researchers identified a Chinese threat actor, CL-UNK-1068, conducting a multi-year campaign against critical infrastructure in South, Southeast, and East Asia. These attacks target high-stakes sectors like aviation, […]
Google’s Threat Intelligence Group (GTIG) reported on March 5, 2026, that 90 zero-day vulnerabilities were exploited in the wild throughout 2025. This figure marks a 15% increase […]
The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned the Russian exploit broker Operation Zero (also known as Matrix LLC) and its founder, Sergey Zelenyuk, for purchasing […]
© Bulletproof Servers. All rights reserved.