Cyber Attacks
View allVerify Maersk communications amid WhiteArmor ransom demand
CISA Updates Incident Form to Link Attacks and Spot Campaigns
Block RevStealer Access via Fake AI Tools and Hijacked YouTube Channels
Cloudflare audits logs for state-sponsored PHP abuse as AI agents raise site costs and containers face obsolescence
AI-Built Threats
View allVulnerabilities
View allLatest news
Patch Fortinet RADIUS flaw allowing rogue server impersonation
A high-severity vulnerability in Fortinet’s RADIUS implementation lets attackers bypass certificate checks to impersonate servers.
Patch SQL Server to Fix High-Severity Privilege Escalation Flaw
Microsoft released fixes for a heap-based buffer overflow in SQL Server that allows authorized attackers to elevate privileges over a network.
Adopt Zero Trust to Build Defensive Agility Against Evolving Cyber Threats
Experts advise shifting from static defenses to agile, zero-trust frameworks to detect and respond to threats without disrupting core business operations.
Secure Kubero: Critical Auth Bypass Lets Attackers Forge Admin Tokens
Unauthenticated attackers can bypass security in Kubero up to 3.1.1 by forging JWTs, granting full administrative control over pipelines and applications.
AMDGPU Linux Driver Patches Enable GFX13 Graphics IP Support
Kernel updates surface for AMDGPU driver, adding support for next-generation GFX13 graphics hardware likely tied to RDNA 5.
Verify Android Patch Levels to Ensure Critical RCE Fixes Are Installed
Google’s November update fixes three critical remote code execution flaws, but the Nov. 1 and Nov. 5 tiers cover different sets of vulnerabilities.
Upgrade OpenEMR to 8.3.0 to Fix Critical SQL Injection Flaw
A critical SQL injection in older OpenEMR versions allows attackers to extract patient data and password hashes via the Fee Sheet module.
Patch IBM API Connect 10.0.8-12.1.1.2 Now to Stop Remote Authenticated Code Execution
Remote authenticated attackers can execute arbitrary code in IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 due to improper control of generation of code.