ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability
The ShinyHunters group has exploited a critical zero-day vulnerability in Oracle PeopleSoft, impacting numerous universities and potentially exposing sensitive data.
Tag Cybersecurity
Chinese Operatives Revive Botnet Amid AI Datacenter Controversy
Reports indicate that Chinese agents are leveraging technology, including American AI, to gather data and influence public opinion regarding AI datacenters in the U.S.
Patches Released for Critical Vulnerabilities by Ivanti, Fortinet, and SAP
Ivanti, Fortinet, and SAP have issued security updates addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.
JDY Botnet Expands Its Reach, Compromising Over 1,500 Devices
The JDY botnet, linked to Chinese state-sponsored actors, has significantly increased its size and capabilities, now comprising over 1,500 compromised devices, primarily targeting SOHO and IoT infrastructures.
Microsoft’s June Patch Tuesday Sets New Record Amid AI Influence
Microsoft's June Patch Tuesday release addressed a record 206 CVEs, with significant implications for system administrators and vulnerability management teams.
North Korean Phishing Campaign Targets Developers with Fake Job Offers
A phishing campaign linked to North Korea has targeted developers with over 250 fraudulent job offers, aiming to steal credentials and cryptocurrency.
Critical Check Point VPN Vulnerability Exploited for Authentication Bypass
Check Point has reported active exploitation of a significant vulnerability in its VPN products, allowing attackers to bypass authentication requirements in specific configurations.
Passwords Exposed in Active Directory Description Fields
A significant security oversight has been revealed involving the storage of passwords in Active Directory description fields, leading to severe consequences for an organization.
Dutch Authorities Dismantle Major Botnet with Millions of Infected Devices
Dutch law enforcement has successfully dismantled a botnet that compromised at least 17 million devices, including IoT products, to conduct cyber attacks.
LLM Agent Utilized for Post-Exploitation Following Marimo Vulnerability
A recent cyber incident highlights the use of a large language model (LLM) agent in post-exploitation activities after exploiting a critical vulnerability in Marimo software.
