News
-
HPE Aruba fixes ClearPass and AOS-Switch security flaws
HPE Aruba has released fixes for vulnerabilities across ClearPass Policy Manager and AOS-Switch that can enable remote code execution, privilege escalation and policy bypass.
-
SPIP fixes pre-authentication RCE and critical plugin flaws
SPIP 4.4.27 fixes multiple serious vulnerabilities, including pre-authentication remote code execution, while separate updates address critical weaknesses in the Crayons and Simple logs plugins.
-
Elastic security update fixes flaws across search, Kibana and endpoint stack
Elastic has released a broad security update covering Elasticsearch, Kibana and Elastic Agent, with flaws affecting authorisation, availability and sensitive cryptographic material.
-
Veeam fixes Backup Viewer route to remote code execution
Veeam has fixed a critical Backup & Replication flaw that allows a user with the Backup Viewer role to execute code remotely on the backup server.
-
PoeLLM turns exposed AI servers into cryptomining botnet
PoeLLM malware has compromised more than 3,400 servers by targeting exposed AI and developer infrastructure, then reusing infected systems for mining, scanning and further exploitation.
-
Trusted npm publishing abused in SubQL supply chain attack
Attackers compromised the SubQL software pipeline and used GitHub Actions trusted publishing to release a malicious npm package that steals credentials and accepts remote commands.
-
Russian hostile activity costs UK at least £2bn a year, report estimates
A new study estimates that Russian hostile activity imposes at least £2bn to £2.5bn in annual costs on the UK, while acknowledging substantial limits in available evidence.
-
Revolut to cover document replacement costs after customer data breach
Revolut will reimburse customers who need to replace identity documents after personal information was disclosed through fraudulent requests impersonating an Italian government authority.
-
Phishing campaign hides behind Microsoft Power BI links
Huntress has uncovered a phishing campaign using legitimate Microsoft Power BI pages to reach victims before installing redundant ScreenConnect clients for persistent remote access.
-
EY breach exposes financial data held for major clients
Personal and financial information held by EY for clients including Man Group was exposed after attackers compromised technology used within the professional services firm’s tax operations.