Vulnerabilities
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
N-able fixes seven N-central CVEs after 33 alleged zero-days are published
Infosecurity Magazine ·
Today
Threat Intel
Iran-backed network directed London attacks over FaceTime, US prosecutors say
An indictment unsealed Tuesday says the broader campaign, targeting Jewish and American sites, included attacks on synagogues in Belgium, the Netherlands and London, and U.S. bank buildings in Amsterdam and Paris.
The Record ·
Vulnerabilities
Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands reported
Infosecurity Magazine ·
Governance
Today: CISO Forum Virtual Summit 2026 Day 2 – Join Cybersecurity Leaders Online
Designed for cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn innovative risk management and defense strategies defining the modern enterprise.
SecurityWeek ·
Endpoint
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk announced that a threat actor gained unauthorized access to a local legacy system inherited through an earlier acquisition and extracted data from it. [...]
BleepingComputer ·
VulnerabilitiesCriticalCVSS 9.6
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation
The Hacker News ·
Threat Intel
Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns
Check Point links three China-nexus clusters through a shared Sparrow malware framework
Infosecurity Magazine ·
Endpoint
eBPF Rootkits: Why Underground Actors Are Taking Notice
Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques are spreading through underground forums, where threat actors are sharing rootkit source code…
BleepingComputer ·
Kai extends Autonomous Defense Platform visibility to internet-facing assets
Kai has announced External Attack Surface Management (EASM), now available on the Kai Autonomous Defense Platform. The company also launched Kai Labs, an expanded research team focused on the hardest open problems where AI meets security.
Help Net Security ·
Vulnerabilities
Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits
The Hacker News ·
Vulnerabilities
Asus, Zoom Release Security Patches
Attackers could exploit them for command execution, memory overwrites, and privilege escalation. The post Asus, Zoom Release Security Patches appeared first on SecurityWeek .
SecurityWeek ·
AI
Embed Security lets analysts teach its AI SOC Platform how to investigate
Embed Security announced new capabilities that let security teams teach Embed how they investigate, what matters in their environment, and how to improve their detections.
Help Net Security ·
Vulnerabilities
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts. The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek .
SecurityWeek ·
Poland shuts down government services platform ePUAP following cyberattack
The attack targeted a nationwide system that allows users to submit official documents, communicate with government agencies and complete administrative procedures online.
The Record ·
Britain, France set out first guidelines for commercial hacking firms
The guidelines call on businesses that develop, sell or finance CCICs to vet their customers, establish technical safeguards against misuse and to maintain systems for monitoring and reporting abuses.
The Record ·
Vulnerabilities
N-able releases security hotfixes for zero-day vulnerabilities
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline. [...]
BleepingComputer ·