Hackers exploit PHP2Shell flaws to deploy data-wiping malware on VMware ESXi hosts
After gaining initial access through the gateways' Mobile Access portal, the attackers exploited another flaw to obtain root privileges.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoAfter gaining initial access through the gateways' Mobile Access portal, the attackers exploited another flaw to obtain root privileges.
3 min readHackers used deepfake videos, fake meeting invitations, and malware to trick victims into giving up sensitive information.
3 min readThe past week saw several significant cybersecurity developments, including the active exploitation of vulnerabilities in Microsoft Outlook, Cisco BroadWorks and OpenSSH, as well as new allegations of state-sponsored cyberattacks targeting critical commercial infrastructure. Security agencies also expanded their warnings about vulnerabilities affecting enterprise communications, artificial intelligence platforms and widely deployed software.
6 min readIn brief: Zyxel and Ivanti fix zero-days in their products, Russian hackers target iOS and Android users in watering hole attacks, and more.
14 min readThe operation abuses insecure HTTP communications in Windows versions of Sogou Input Method to deliver the DarkVigil surveillance implant.
3 min read