Vulnerabilities
- Tripwire Enterprise Flaw Let Attackers Bypass Authentication
- Telerik Report Server Flaw Let Remote Attackers Bypass Authentication
- Zyxel issues emergency RCE patch for end-of-life NAS devices
- XSS Flaws In Multiple WordPress Plugins Exploited To Deploy Malware
- Critical wpDataTables Vulnerability Let Attackers Perform SQL Injection
- Confluence Data Center & Server Flaw Allows Remote Code Execution
- 13,800+ Internet-Exposed Check Point Gateways Vulnerable To 0-Day Attacks: Poc Released
- Malware botnet bricked 600,000 routers in mysterious 2023 attack
- PoC Exploit Released for Microsoft Edge Information Disclosure Vulnerability
- Microsoft Azure Vulnerability Let Attackers Bypass Firewall Rules
- CISA warns of actively exploited Linux privilege elevation flaw
TTP
- Beware Of Phishing Emails Prompting Execution Via Paste (CTRL+V)
- Hacker Tool Extracts All the Data Collected By Windows’ New Recall AI
- Threat Actors Weaponize Excel Files To Attack Windows Machines
- Cracked Microsoft Office Version Delivers Multiple Pronged Malware
- Hackers Exploiting Amazon, Google & IBM Cloud Services To Steal Customer Data
- Cisco Webex Meetings Meeting Flaw Let Attackers Gain Unauthorized Access
- New V3B phishing kit targets customers of 54 European banks
Breaches
- 361 Million Unique Email Credentials Leaked On Telegram Channels
- Major London hospitals disrupted by Synnovis ransomware attack
- Threat Actors Claiming Breach Of Heineken Employees Data
- Ticketmaster confirms massive breach after stolen data for sale online
- Snowflake account hacks linked to Santander, Ticketmaster breaches
Noteworthy
- Police seize over 100 malware loader servers, arrest four cybercriminals
- TikTok fixes zero-day bug used to hijack high-profile accounts
- Google Chrome change that weakens ad blockers begins June 3rd
- Kaspersky releases free tool that scans Linux for known threats
- ANY RUN Sandbox Added New Features to Analyse Sophisticated Malware
- OPNsense 24.1.8 Release
- FreeBSD 14.1-RELEASE Announcement
Miscellaneous
- NSA Warns iPhone & Android Users to Restart Devices Once Every Week
- Microsoft deprecates Windows NTLM authentication protocol