Home Cyber Threat Intelligence Mobile Version
Alert Details

GitLab  New

The latest GitLab release includes 10 security fixes, 4 rated High, 5 rated Medium, 1 rated Low. Highest CVSSv4 score of 8.7

More...

PTZOptics  New

PTZOptics and other Pan-Tilt-Zoom Camera providers contain several vulnerabilities including Hardcoded Credentials and Improper Authentication. CVSSv4 score of 9.3

More...

Mitel  New

A path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab could allow a remote attacker to conduct a path traversal attack due to insufficient input validation. CVSSv3 score of 9.8

More...

Ricoh  New

Several vulnerabilities have been reported in Ricoh software, including an RCE vulnerability in Ricoh Streamline NX PC client. Highest CVSSv3 score of 9.8

More...

Siemens  New

Mendix Studio Pro contains a vulnerability in the module installation process, that could allow a remote attacker to write or modify arbitrary files in directories outside a developer’s project directory. CVSSv4 score of 6.1

More...

XWiki  New

The XWiki query validator does not sanitize functions that would be used in a simple select and Hibernate allows using any native function in an HQL query. It's possible to execute any SQL query. CVSSv4 score of 9.3

More...

Palo Alto Networks  Monthly Patches

Palo Alto Networks Monthly Patches include 7 bulletins, 2 rated High, 2 rated Medium, and 3 rated Low. Highest CVSSv3 score of 8.6

More...

Moxa  

Moxa PT-G7728 and PT-G7828 series are affected by a high-severity vulnerability that could allow a remote attacker to cause a DoS. CVSSv4 score of 8.7

More...

Meinberg  

The LANTIME Firmware has been updated to fix security vulnerabilities in third-party software included. Highest CVSSv3 score of 7.5

More...

Mozilla  

Mozilla has published security bulletins for Thunderbird and Firefox, rated High.

More...

SinoTrack  

SinoTrack Devices have two vulnerabilities, including Weak Authentication and Observable Response Discrepency. Highest CVSSv4 score of 8.8

More...

MicroDicom  

DICOM Viewer contains an out-of-bounds write vulnerability. A remote attacker can exploit this to execute arbitrary code. CVSSv4 score of 8.6

More...

Linux  

Updates for SUSE, Red Hat, Amazon Linux 2, AlmaLinux, and Rocky Linux.

More...

Alert State
GitLab PTZOptics Mitel
Patch Patch Patch
Ricoh Siemens XWiki
Patch Patch Patch
Click for vulnerability details
Alert State
PaloAlto Moxa Meinberg
+24hr +24hr +24hr
Mozilla SinoTrack MicroDicom
+24hr +24hr +24hr
Click for vulnerability details
Virus News

VBS/DwnLdr-VXG   More...

Troj/Phish-DAX   More...

Troj/Phish-DAT   More...

Troj/Phish-CZE   More...

Troj/PDFUri-FON   More...

Troj/PDFUri-FOC   More...

Troj/DocDl-PCY   More...

Troj/Agent-AZLK   More...

JS/DwnLdr-VVZ   More...

Java/Adwind-EER   More...

Computer Network Defence Alert Level
Overall
Security News

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets

More...

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month

More...

Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

More...

CTEM is the New SOC: Shifting from Monitoring Alerts to Measuring Risk

More...

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

More...

WordPress Sites Turned Weapon: How VexTrio and Affiliates Run a Global Scam Network

More...

New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes

More...

AI Agents Run on Secret Accounts — Learn How to Secure Them in This Webinar

More...

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction

More...

Non-Human Identities: How to Address the Expanding Security Risk

More...

ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks

More...

Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool

More...

Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks

More...

295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager

More...

INTERPOL Dismantles 20,000+ Malicious IPs Linked to 69 Malware Variants in Operation Secure

More...

Why DNS Security Is Your First Defense Against Cyber Attacks?

More...

SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords

More...

How to Build a Lean Security Model: 5 Lessons from River Island

More...

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

More...

Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps

More...

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

More...

FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware

More...

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

More...

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

More...

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

More...

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

More...

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

More...

Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group

More...

Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks

More...

⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks

More...

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

More...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

More...

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

More...

Malicious Browser Extensions Infect Over 700 Users Across Latin America Since Early 2025

More...

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users

More...

Empower Users and Protect Against GenAI Data Loss

More...

Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam

More...

Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV

More...

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

More...

Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hard-Coded Credentials

More...

Researchers Detail Bitter APT’s Evolving Tactics as Its Geographic Scope Expands

More...

Redefining Cyber Value: Why Business Impact Should Lead the Security Conversation

More...

Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware

More...

DoJ Seizes 145 Domains Tied to BidenCash Carding Marketplace in Global Takedown

More...

Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI

More...

Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App

More...

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

More...

Your SaaS Data Isn't Safe: Why Traditional DLP Solutions Fail in the Browser Era

More...

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

More...

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

More...

World Map
Team Cymru Malicious Activity Map
Latest Tool Versions
Burp Suite   13Jun25 2025.5.3
Kali-Linux  13Juin25 20265.2
Metasploit  12Jun25 6.4.69
Nessus  17Apr25 10.8.4
NetworkMiner  04Apr25 3.0
Nmap  28May25 7.97
Snort  26May25 3.8.1.0
Wireshark  04Jun25 4.4.7
Latest IDS Signatures
Cisco Sourcefire  12Jun25 06-12-001
Talos  12Jun25 2025-06-12
Proofpoint ET  12Jun25 10949
Santa Clara CA Ft Belvoir (VA) UTC/Zulu London Central Europe Kyiv Moscow Shanghai Sydney Wellington NZ