Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
Exploitation of Roundcube webmail vulnerabilities CVE-2024-42009 and CVE-2025-49113 to compromise mail servers.
Threat Intel
-
-
North Korean Hackers Target Open Source Developers in Supply Chain Attacks
North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a broad supply chain campaign, Socket reports.
-
Seven Bugs in FatFs Put IoT and Embedded Devices at Risk
Disclosure of seven vulnerabilities in the FatFs open-source library.
-
Firewall hacks, password leaks threaten major maritime, offshore energy companies
Leak and exploitation of over 86,000 Fortinet administrator credentials known as FortiBleed.
-
ICAI dismisses claims of data breach, says members’ and students’ records remain secure
NEW DELHI: The Institute of Chartered Accountants of India (ICAI) has dismissed as "false, baseless and malicious" social media posts alleging a breach of its members' and…
-
Two Harbors finally approves CrossCountry deal; UWM sued over vendor data breach
A data breach involving a third-party vendor.
-
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
Phishing campaign leveraging DEBULL tooling to abuse Microsoft's device-code authentication flow.
-
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust patched multiple critical authentication bypass and denial-of-service vulnerabilities.
-
Building an EASM & Threat Intelligence Platform with Local AI (And Why I Kept It Private)
If you’ve spent any time working in offensive security or managing an organization’s perimeter, you probably know the drill: run some scans, comb through thousands of lines…