Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

15/08/2025 0 Comments 0 tags

Cisco has released security updates to address a maximum-severity security flaw in Secure Firewall Management Center (FMC) Software that could allow an attacker to execute arbitrary code on affected systems.

New HTTP/2 ‘MadeYouReset’ Vulnerability Enables Large-Scale DoS Attacks

14/08/2025 0 Comments 0 tags

Multiple HTTP/2 implementations have been found susceptible to a new attack technique called MadeYouReset that could be explored to conduct powerful denial-of-service (DoS) attacks. “MadeYouReset bypasses the typical server-imposed limit

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

14/08/2025 0 Comments 0 tags

Japan’s CERT coordination center (JPCERT/CC) on Thursday revealed it observed incidents that involved the use of a command-and-control (C2) framework called CrossC2, which is designed to extend the functionality of

Have You Turned Off Your Virtual Oven?

14/08/2025 0 Comments 0 tags

You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

14/08/2025 0 Comments 0 tags

Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication (NFC) to conduct relay attacks for facilitating fraudulent transactions in attacks targeting banking customers in Brazil.

Simple Steps for Attack Surface Reduction

14/08/2025 0 Comments 0 tags

Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

14/08/2025 0 Comments 0 tags

Google said it’s implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to “ensure a safe

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

14/08/2025 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.  N-able

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

13/08/2025 0 Comments 0 tags

Cybersecurity researchers have discovered a new malvertising campaign that’s designed to infect victims with a multi-stage malware framework called PS1Bot. “PS1Bot features a modular design, with several modules delivered used

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

13/08/2025 0 Comments 0 tags

Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.  The vulnerability impacting Zoom Clients