Recent supply chain attacks on NuGet and npm have targeted developers by exfiltrating sensitive application data and deploying cross-platform malware. Malicious NuGet Packages: ASP.NET Data Theft Researchers at Socket identified four […]
The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned the Russian exploit broker Operation Zero (also known as Matrix LLC) and its founder, Sergey Zelenyuk, for purchasing […]
Peter Williams, the 39-year-old former General Manager of L3Harris Technologies‘ cyber division, Trenchant, was sentenced to seven years and three months in prison for stealing and selling sensitive zero-day […]
Threat actors are actively exploiting CVE-2023-46604, a critical remote code execution (RCE) vulnerability in Apache ActiveMQ, to gain initial access, move laterally via Remote Desktop Protocol (RDP), […]
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-25108 to its Known Exploited Vulnerabilities (KEV) Catalog, confirming active exploitation of this flaw in the wild. Vulnerability Breakdown Mandatory Remediation […]
A man was arrested in São Paulo for operating a clandestine setup to send fraudulent SMS messages with malicious links, in an operation named “Erbs […]
A financially motivated threat group known as Diesel Vortex is currently targeting freight and logistics organizations across the U.S. and Europe in a sophisticated phishing campaign. Active since […]
Wynn Resorts has recently been targeted by the ShinyHunters hacking group, which claims to have stolen approximately 800,000 records containing sensitive employee data. Key Details of the Breach […]
The 1Campaign platform is a “cybercrime-as-a-service” suite used by attackers to launch malicious Google Ads while bypassing automated security filters. Key tactics and features of the platform […]
The RoguePilot flaw was a critical AI-driven vulnerability in GitHub Codespaces (discovered by Orca Security) that allowed attackers to perform a full repository takeover by exploiting GitHub Copilot. The attack chain […]
© Bulletproof Servers. All rights reserved.