News
-
Fake Claude installers conceal malicious redirects behind Google and Bing
Push Security has identified a paid-search campaign that passes through apparently reputable search destinations before delivering a fake Claude installer.
-
IBM security fixes span databases, analytics and authentication software
France’s cyber authority has flagged an October collection of IBM vulnerabilities affecting databases, QRadar components and enterprise authentication services.
-
Attackers turn compromised backup servers into cryptocurrency miners
Attackers are exploiting flaws in AhsayCBS backup software to establish persistent access and install cryptocurrency miners, threatening infrastructure used by managed service providers.
-
SonicWall exploitation attempts observed after critical SMA1000 patch
Independent honeypot research indicates attacks targeting a newly patched SonicWall gateway vulnerability, although successful compromise has not been established.
-
GhostAction attack expands from GitHub secrets into cloud credentials
Researchers have documented a new GhostAction wave that planted malicious workflows across hundreds of GitHub repositories and sought credentials from their histories.
-
Apache Struts users face four newly documented security flaws
France’s cyber authority has warned that recently disclosed Apache Struts vulnerabilities include potential remote code execution and information disclosure.
-
Tenable Identity Exposure fix requires listener reinstall after critical flaw
A command injection vulnerability in Tenable’s identity monitoring software can expose sensitive Active Directory infrastructure unless fully remediated.
-
Nextcloud fixes expose security gaps across collaboration components
French cyber authorities warn of vulnerabilities affecting Nextcloud server software, team folders, locking, and collaborative applications.
-
Italy tracks 178 malicious campaigns in one week as banking lures persist
Italy’s national digital agency identified 178 malicious campaigns over seven days and shared more than 1,200 indicators of compromise.
-
Suspected Qilin ransomware organiser arrested in Germany after Japanese extradition
Japanese police helped extradite a Russian national to Germany following an international investigation into the Qilin ransomware operation.