Security Intelligence
Russian State-Sponsored Actors Target Routers Through Weak SNMP Configurations
A multinational advisory warns that Russian FSB Center 16 exploited weak SNMP configurations to steal credentials and...
Security Intelligence
Progress ShareFile Storage Zone Controllers taken offline following security threat
Progress Software has instructed those using ShareFile Storage Zone Controllers to shut down affected servers ASAP due...
Security Intelligence
Tenda firmware backdoor grants administrative access to network devices
A hidden authentication backdoor in multiple Tenda firmware versions allows admin access to affected devices through...
Security Intelligence
Ubiquiti patches multiple critical vulnerabilities in UniFi products
BeyondTrust disclosed four vulnerabilities affecting RS and PRA, including two critical flaws that can allow...
Security Intelligence
BeyondTrust patches critical authentication bypass vulnerabilities
BeyondTrust disclosed four vulnerabilities affecting RS and PRA, including two critical flaws that can allow...
Security Intelligence
Exploitation reported following Adobe security updates
Adobe released security updates for multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign...
Security Intelligence
New CitrixBleed-Like Flaw Exploited
Citrix patched a CitrixBleed-like flaw in NetScaler ADC and Gateway allowing unauthenticated memory disclosure, with...
Security Intelligence
Exploitarium repository publishes exploit research affecting widely used software
A public GitHub repository published PoC exploits for libssh2, Gitea, and other widely used software, raising risk for...
Security Intelligence
Critical MailPlus Server Flaws Expose Email Infrastructure
Synology patched three MailPlus Server vulnerabilities, including a maximum-severity flaw allowing unauthenticated file...
Security Intelligence
Targeting of OpenWrt-derived platforms exposes OT edge gaps
Active exploitation of a critical Lantronix flaw highlights growing adversary interest in OpenWrt-based edge devices...
Security Intelligence
Actively exploited PTC Windchill flaw allows unauthenticated RCE
A critical flaw in PTC Windchill and FlexPLM allows unauthenticated remote code execution, giving attackers persistent...
Security Intelligence
Update: FortiBleed exposes Fortinet credentials at global scale
New research shows that FortiBleed operates as a continuous credential harvesting and validation system, not just a...