Cloud SecurityTeamPCP: From Redis Attacks to Supply Chain Compromise
Explore TeamPCP's cyber activities from 2020, including Redis attacks and software supply chain compromises, with analysis of campaigns like ShadowRay 2.0.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 32
More news
Page 32 / 48 · 425 articlesCloud Security
VulnerabilitiesChina Launches Cybersecurity Review of Palo Alto Networks Products
China initiates cybersecurity review of Palo Alto Networks products to protect critical infrastructure, amid geopolitical tensions and tech self-reliance push.
MalwareRoot Backdoor in Zbtlink Routers: ENDLESSDOORS Enables Remote Control
Learn about ENDLESSDOORS, a backdoor in Zbtlink routers enabling remote root access. Critical risk discovered; protect your network with these indicators.
VulnerabilitiesWindows Hello for Business Can Be Abused by Malware to Maintain Access to Entra ID
Malware can exploit Windows Hello for Business to maintain persistent access to Microsoft Entra ID without admin privileges. Learn about detection and mitigations.
vpnVPNet: The New VPN Under Scrutiny
Explore VPNet's zero-trust VPN claims, architecture using Intel SGX, features, privacy policies, and the scrutiny it faces regarding user anonymity and legal requests.
VulnerabilitiesHead Mare Compromises TrueConf Servers and Distributes Clients with PhantomCore
Head Mare compromises TrueConf servers, distributing PhantomCore malware via malicious clients. Vulnerable versions need immediate updates.
VulnerabilitiesCSS Attacks in Webmail Can Steal Passwords and Tokens—and Direct AI Agents
Discover how CSS attacks in webmail can compromise passwords, tokens, and AI agents, as revealed at Black Hat USA 2026, affecting major email services.
AIRovoBlast, the One-Click Flaw That Can Make Atlassian’s AI Exfiltrate Data
Varonis Threat Labs has detailed RovoBlast, a critical vulnerability in Atlassian Rovo that allows attackers to inject controlled instructions into a
VulnerabilitiesHTTP Terminator Uses AI to Discover New HTTP Desynchronization Techniques
PortSwigger has introduced HTTP Terminator , an AI-assisted research system developed by James Kettle to generate and validate HTTP desynchronization