SecurityNewZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
> Search
30 results for “attack”
SecurityNew
SecurityNewCourse Weighs Attackers' View of Cyber-Physical Systems
SecurityWeek and MTSI repeat hands-on CAM training at the 25th ICS Cyber Security Conference.
SecurityNewMemory Poisoning: The New AI Attack Frontier
InjecMEM lets attackers plant persistent instructions in AI agents' memory with a single prompt.
SecurityNewAI tools shrink attack timelines for UAT-10147
Chinese-speaking group automates post-breach ops, slashing response windows for defenders.
SecurityOracle WebLogic Flaw Under Active Attack
CISA adds CVE-2026-21962 to KEV catalog, citing active exploitation and urging federal agencies to patch by August 27.
SecuritySpring Framework's 91 Flaws: A Wake-Up Call
Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.
SecurityIran Attack on UK Power Plant Sparks CNI Alarm
Experts warn of resilience gaps after Iranian hackers disable a UK power plant for days.
SecurityCar head units hijacked for proxy botnet abuse
Supply-chain attack on Android car head units turns them into proxy nodes and ad fraud tools.
SecuritySecuring Windows Named Pipes
Attackers target Windows named pipes; developers must verify identities, permissions, and data.
Cyber CrimeRust Supply Chain Attack Tied to North Korea
Wiz links a crates.io compromise to Sapphire Sleet, warning of broad developer exposure.
Tech NewsSigned Drivers Turn Into Attack Tools
This week's threats exploit trusted components: signed drivers, legitimate apps, and AI to bypass defenses.
SecurityWhen the 'rescuer' is the attacker
Ransom Busters, a fake recovery firm, steals victims' ransom payments that were meant for the original criminals.
SecurityCitrix NetScaler flaws: patch gap may invite attackers
Citrix warns of two NetScaler flaws, including an auth bypass, urging immediate patches.
SecurityAI-Assisted Attacks Target Water Systems
US agencies warn hackers are exploiting Siemens PLCs in critical infrastructure with AI-generated scripts.
Cyber CrimeFeds: AI-Assisted Attacks on Critical PLCs Are Here
Government agencies warn of active exploitation of Siemens S7 controllers using AI-generated attack code.
SecurityAI-Generated Scripts Target Siemens PLCs
Joint advisory warns of AI-powered attacks exploiting Siemens S7 PLCs across critical infrastructure sectors.
SecurityMLflow SSRF Flaw Exploited for Cloud Credential Theft
Attackers are exploiting critical MLflow and FUXA vulnerabilities to steal cloud credentials and execute code.
Tech NewsAI-Speed Attacks Force Rethink of Cyber Defense
Experts discuss if detection-first security can keep pace as AI accelerates exploitation and shrinks patch-to-exploit timelines.
SecurityNASA ground control flaw opens door to unauthenticated commands
A critical AIT-GUI vulnerability could let attackers send commands to NASA spacecraft and instruments without authentication.
Cyber CrimePokémon Center UK Breach Hits Orders
Pokémon Center UK cancels orders after logistics partner CEVA suffers cyberattack, exposing customer data.
SecurityGitLab Critical Flaw Allows Unauthenticated Project Deletion
A critical GitLab vulnerability could let unauthenticated attackers modify or delete public projects and user data.
Cyber CrimeFrench Tax Breach Hits 680K
France's tax agency says 678,000 people had data stolen in a credential-based attack.
SecurityRansomware in VMware Attack Looks Like a Distraction
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
SecurityModem Memory Flaw Opens Door to Kernel Takeover
UNISOC modem flaw lets attackers escalate code execution to kernel level via video calls.
Cyber CrimeClop Claims Hit GE, Philips as Fallout Widens
GE and Philips confirm probing Clop breach claims as the gang's PTC Windchill attacks ripple through enterprise giants.
SecurityVoLTE Attack Chain Threatens Android Kernel Security
A two-stage exploit chain can achieve full Android kernel access on Unisoc devices via VoLTE video call, with no patch.
SecurityAI Safety Firm Reveals How a Name Mix-Up Led to Real-World Attacks
Irregular details an incident where AI models escaped a test environment and attacked a real company due to a naming error.
SecurityThreema DDoS attacks expose mitigation limits
Swiss messaging firm Threema faced sustained DDoS attacks this week, with changing tactics challenging defenses.
AI & MLDefensive AI Startup Targets the Offense Gap
Corma's AI agents stopped a live attack in under 10 minutes while its CEO walked his dog, showing defenders can keep pace.
SecurityWhy 2,500-Org Breach Wasn't What It Seemed
SOCRadar says most orgs hit in LiteLLM attack were earlier Trivy victims, not LiteLLM.