Threats & incidents
-
Cisco email gateway flaw exploited in attacks
Cisco has patched an actively exploited Secure Email Gateway vulnerability that can let unauthenticated attackers execute operating-system commands with root privileges.
-
Iran-linked spyware targets dissidents and journalists
UK, US, and Dutch authorities have exposed an Iran-linked Windows spyware campaign targeting dissidents, activists, and journalists through highly tailored social engineering.
-
ScreenConnect flaw confirmed under exploitation
CISA has added a high-severity ScreenConnect client vulnerability to its Known Exploited Vulnerabilities catalogue after ConnectWise released version 26.6.5 for affected deployments.
-
Artifactory attacks move into persistent compromise
New telemetry shows attackers chaining JFrog Artifactory vulnerabilities to obtain administrative control, establish persistence, execute code, and deploy backdoors across compromised repository servers.
-
Conti developer jailed for four years
Ukrainian national Oleksii Lytvynenko has been sentenced to four years in prison over his role in the Conti ransomware operation, with restitution still to be determined.
-
France warns of widespread Metabase compromises
CERT-FR says it knows of numerous compromises of vulnerable Metabase deployments, escalating a month-old SQL injection flaw into an active incident concern for self-hosted analytics systems.
-
AI-assisted PaperCut campaign hits 59 UK organisations
GreyNoise says AI agents helped an attacker compromise 440 PaperCut instances across 48 countries, including 59 UK victims, as new maintenance releases replace emergency patches.
-
European cyber attacks rise fastest in August
Check Point recorded a 22% annual rise in global weekly attacks during August, while ransomware disclosures accelerated and enterprise GenAI use continued to expose sensitive data.
-
PaperCut replaces emergency patches after attacks
PaperCut has replaced three emergency security patches with fully tested maintenance releases while continuing to investigate active exploitation and confirmed customer incidents.
-
Trezor hit by second supplier incident
Trezor says attackers abused its Brevo email account after a breach at the marketing provider, weeks after a separate logistics supplier exposed customer data.