Threats tagged 'exploit'

U.S. CISA adds Dassault Systèmes DELMIA Apriso flaw to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/182120/hacking/u-s-cisa-adds-dassault-systemes-delmia-apriso-flaw-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Akira ransomware exploiting critical SonicWall SSLVPN bug again Source: https://www.bleepingcomputer.com/news/security/akira-ransomware-exploiting-critical-sonicwall-sslvpn-bug-again/

Malware#infosecnews#redditGermany+7

SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers Source: https://thehackernews.com/2025/09/sonicwall-ssl-vpn-flaw-and.html

Malware#infosecnews#redditGermany+7

Apple CarPlay Exploited To Gain Root Access By Executing Remote Code Source: https://cybersecuritynews.com/apple-carplay-vulnerability-exploited/

Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware Source: https://hackread.com/zero-day-sitecore-exploited-deploy-weepsteel-malware/

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation Source: https://thehackernews.com/2025/09/cisa-orders-immediate-patch-of-critical.html

U.S. CISA adds Sitecore, Android, and Linux flaws to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/181924/breaking-news/u-s-cisa-adds-sitecore-android-and-linux-flaws-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X Source: https://hackread.com/scammers-exploit-grok-ai-video-ad-scam-x-malware/

New TP-Link zero-day surfaces as CISA warns other flaws are exploited Source: https://www.bleepingcomputer.com/news/security/new-tp-link-zero-day-surfaces-as-cisa-warns-other-flaws-are-exploited/

Exploit development for IBM i - turning blind AS/400 command execution into a proper shell Source: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/

Google's September 2025 Android Security Update Fixes 120 Vulnerabilities, Including 2 Active Zero-Day Exploits Source: https://securitydaily.news/article?id=186

U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/181886/hacking/u-s-cisa-adds-tp-link-archer-c7eu-and-tl-wr841n-flaws-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Hackers use new HexStrike-AI tool to rapidly exploit n-day flaws Source: https://www.bleepingcomputer.com/news/security/hackers-use-new-hexstrike-ai-tool-to-rapidly-exploit-n-day-flaws/

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats Source: https://thehackernews.com/2025/09/iranian-hackers-exploit-100-embassy.html

Google fixes actively exploited Android flaws in September update Source: https://www.bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-flaws-in-september-update/

News#infosecnews#redditGermany+7

Malicious npm Packages Exploit Ethereum Smart Contracts Source: https://www.infosecurity-magazine.com/news/malicious-npm-packages-exploit/

Marshal madness: A brief history of Ruby deserialization exploits Source: https://blog.trailofbits.com/2025/08/20/marshal-madness-a-brief-history-of-ruby-deserialization-exploits/

News#netsec#redditGermany+6

This report details the analysis of RapperBot, a sophisticated botnet targeting IoT devices, particularly Network Video Recorders (NVRs). The malware exploits vulnerabilities in these devices to create a large-scale DDoS infrastructure. The analysis covers the botnet's infection process, command and control mechanisms, and its evolution over time. Key features include the use of NFS for malware distribution, encrypted DNS TXT records for C2 communication, and a wide range of supported device architectures. The report also discusses recent law enforcement actions against the botnet and provides recommendations for protection against such threats.

Malware#infrastructure#ddosGermany+6

A critical flaw in the [Mobile Security Framework (MobSF)](https://cybersecuritynews.com/mobsf-framework-zero-day-vulnerability/) has been discovered, allowing authenticated attackers to upload and execute malicious files by exploiting improper path validation. 

Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT Malware Source: https://hackread.com/silver-fox-apt-exploit-signed-windows-driver-valleyrat/