Tag: attacker
-
The Register: Zero-day lets nation-state spies cross-examine elite US law firm Williams & Connolly
Source URL: https://www.theregister.com/2025/10/09/zeroday_nationstate_us_law_firm/ Source: The Register Title: Zero-day lets nation-state spies cross-examine elite US law firm Williams & Connolly Feedly Summary: China-linked snoops crack email at DC powerhouse that represented Bill Clinton, Elizabeth Holmes Washington’s elite law firm Williams & Connolly has confirmed that attackers exploited a zero-day vulnerability to access a handful of attorney…
-
Cisco Talos Blog: Too salty to handle: Exposing cases of CSS abuse for hidden text salting
Source URL: https://blog.talosintelligence.com/too-salty-to-handle-exposing-cases-of-css-abuse-for-hidden-text-salting/ Source: Cisco Talos Blog Title: Too salty to handle: Exposing cases of CSS abuse for hidden text salting Feedly Summary: A simple yet effective tactic, known as hidden text salting, is increasingly used by cybercriminals over the past few months to evade even the most advanced email security solutions, including those powered…
-
Slashdot: Redis Warns of Critical Flaw Impacting Thousands of Instances
Source URL: https://it.slashdot.org/story/25/10/06/222222/redis-warns-of-critical-flaw-impacting-thousands-of-instances?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Redis Warns of Critical Flaw Impacting Thousands of Instances Feedly Summary: AI Summary and Description: Yes Summary: The Redis security team has issued critical patches for a vulnerability (CVE-2025-49844) that could allow remote code execution on a significant number of instances. This vulnerability, stemming from a long-standing issue in…
-
Microsoft Security Blog: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
Source URL: https://www.microsoft.com/en-us/security/blog/2025/10/06/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-file-transfer-vulnerability/ Source: Microsoft Security Blog Title: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability Feedly Summary: Storm-1175, a financially motivated actor known for deploying Medusa ransomware and exploiting public-facing applications for initial access, was observed exploiting the deserialization vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035. We are publishing this…