Clustered news
Cluster
Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer
2025-06-13
Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion
2025-06-13
Apple confirmed that Messages app flaw was actively exploited in the wild
2025-06-13
Bert ransomware: what you need to know
2025-06-13
Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider
2025-06-12
New Secure Boot flaw lets attackers install bootkit malware, patch now
2025-06-10
Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks
2025-06-09
AI becomes key player in enterprise ransomware defense
2025-06-06
Ransomware and USB attacks are hammering OT systems
2025-06-06
Kettering Health confirms Interlock ransomware behind cyberattack
2025-06-06
Critical Fortinet flaws now exploited in Qilin ransomware attacks
2025-06-06
Marks & Spencer’s ransomware nightmare – more details emerge
2025-06-06
Attackers exploit Fortinet flaws to deploy Qilin ransomware
2025-06-06
Hacker selling critical Roundcube webmail exploit as tech info disclosed
2025-06-05
Roundcube Webmail under fire: critical exploit found after a decade
2025-06-04
Google fixes another actively exploited vulnerability in Chrome, so update now!
2025-06-04
FBI: Play ransomware breached 900 victims, including critical orgs
2025-06-04
Cisco warns of ISE and CCP flaws with public exploit code
2025-06-04
Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets
2025-06-03
CISA warns of ConnectWise ScreenConnect bug exploited in attacks
2025-06-03
Cluster
Your Meta AI chats might be public, and it’s not a bug
2025-06-13
OWASP Nettacker: Open-source scanner for recon and vulnerability assessment
2025-06-11
Google bug allowed phone number of almost any user to be discovered
2025-06-10
SAP June 2025 Security Patch Day fixed critical NetWeaver bug
2025-06-10
Google patched bug leaking phone numbers tied to accounts
2025-06-09
TXOne Networks unveils intelligent vulnerability mitigation capability
2025-06-04
HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass
2025-06-04
New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
2025-06-03
Google fixed the second actively exploited Chrome zero-day since the start of the year
2025-06-03
Scammers are constantly changing the game, but so are we. Introducing Malwarebytes Scam Guard
2025-06-03
Malwarebytes Scam Guard spots and avoids potential scams
2025-06-03
Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code
2025-06-03
Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub
2025-06-02
Cluster
Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers
2025-06-15
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
2025-06-12
Paragon Graphite Spyware used a zero-day exploit to hack at least two journalists’ iPhones
2025-06-12
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild
2025-06-11
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)
2025-06-11
Hackers exploited Windows WebDav zero-day to drop malware
2025-06-11
44% of people encounter a mobile scam every single day, Malwarebytes finds
2025-06-10
Microsoft June 2025 Patch Tuesday fixes exploited zero-day, 66 flaws
2025-06-10
New Mirai botnet targets TBK DVRs by exploiting CVE-2024-3721
2025-06-09
Week in review: Google fixes exploited Chrome zero-day, Patch Tuesday forecast
2025-06-08
Google fixes Chrome zero-day with in-the-wild exploit (CVE-2025-5419)
2025-06-04
Cluster
Over 46,000 Grafana instances exposed to account takeover bug
2025-06-15
Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month
2025-06-13
INTERPOL Dismantles 20,000+ Malicious IPs Linked to 69 Malware Variants in Operation Secure
2025-06-11
Over 80,000 servers hit as Roundcube RCE bug gets rapidly exploited
2025-06-11
Mirai botnets exploit Wazuh RCE, Akamai warned
2025-06-10
Over 84,000 Roundcube instances vulnerable to actively exploited flaw
2025-06-09
Play ransomware group hit 900 organizations since 2022
2025-06-06
Tax resolution firm Optima Tax Relief hit by ransomware, data leaked
2025-06-06
Android banking trojan Crocodilus rapidly evolves and goes global
2025-06-03
Cluster
FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware
2025-06-10
Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users
2025-06-10
DanaBot malware operators exposed via C2 bug added in 2022
2025-06-10
Malware found in NPM packages with 1 million weekly downloads
2025-06-07
Ransomware hiding in fake AI, business tools
2025-06-05
Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware
2025-06-05
How to build a robust Windows service to block malware and ransomware
2025-06-05
Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads
2025-06-04
Android malware Crocodilus adds fake contacts to spoof trusted callers
2025-06-03
Cluster
Anubis ransomware adds wiper to destroy files beyond recovery
2025-06-14
Operation Secure disrupts global infostealer malware operations
2025-06-11
Sensata Technologies says personal data stolen by ransomware gang
2025-06-09
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
2025-06-08
New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack
2025-06-06
New PathWiper data wiper malware hits critical infrastructure in Ukraine
2025-06-06
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
2025-06-06
Interlock ransomware claims Kettering Health breach, leaks stolen data
2025-06-05
Cluster
Unusual toolset used in recent Fog Ransomware attack
2025-06-14
Discord flaw lets hackers reuse expired invites in malware campaign
2025-06-13
Fog ransomware attack uses unusual mix of legitimate and open-source tools
2025-06-12
Malware attack disguises itself as DeepSeek installer
2025-06-12
U.S. Offers $10M bounty for info on RedLine malware creator and state hackers
2025-06-06
US offers $10M for tips on state hackers tied to RedLine malware
2025-06-05
FBI: BADBOX 2.0 Android malware infects millions of consumer devices
2025-06-05
Cluster
Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware
2025-06-13
Google patches new Chrome zero-day bug exploited in attacks
2025-06-03
Qualcomm fixes three Adreno GPU zero-days exploited in attacks
2025-06-02
⚡ Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More
2025-06-02
Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU
2025-06-02
Qualcomm fixed three zero-days exploited in limited, targeted attacks
2025-06-02
Cluster
U.S. CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog
2025-06-12
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog
2025-06-10
U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog
2025-06-10
U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
2025-06-05
U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog
2025-06-04
U.S. CISA adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
2025-06-03
Cluster
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 48
2025-06-08
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 47
2025-06-01