SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

25/04/2025 0 Comments 0 tags

Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of facilitating unauthorized file uploads and code execution.  “The exploitation is

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

25/04/2025 0 Comments 0 tags

Cybersecurity researchers are warning about a new malware called DslogdRAT that’s installed following the exploitation of a now-patched security flaw in Ivanti Connect Secure (ICS). The malware, along with a

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

25/04/2025 0 Comments 0 tags

Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to gain unauthorized access to files, inject malicious data,

159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure

24/04/2025 0 Comments 0 tags

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 2024. “We continue to see

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

24/04/2025 0 Comments 0 tags

Cybersecurity researchers have demonstrated a proof-of-concept (PoC) rootkit dubbed Curing that leverages a Linux asynchronous I/O mechanism called io_uring to bypass traditional system call monitoring. This causes a “major blind

Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware

24/04/2025 0 Comments 0 tags

At least six organizations in South Korea have been targeted by the prolific North Korea-linked Lazarus Group as part of a campaign dubbed Operation SyncHole. The activity targeted South Korea’s

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

24/04/2025 0 Comments 0 tags

The threat actors behind the Darcula phishing-as-a-service (PhaaS) platform have released new updates to their cybercrime suite with generative artificial intelligence (GenAI) capabilities. “This addition lowers the technical barrier for

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

24/04/2025 0 Comments 0 tags

A critical security flaw has been disclosed in the Commvault Command Center that could allow arbitrary code execution on affected installations. The vulnerability, tracked as CVE-2025-34028, carries a CVSS score

Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network Redesign

24/04/2025 0 Comments 0 tags

The Evolving Healthcare Cybersecurity Landscape  Healthcare organizations face unprecedented cybersecurity challenges in 2025. With operational technology (OT) environments increasingly targeted and the convergence of IT and medical systems creating an

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

24/04/2025 0 Comments 0 tags

WhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from sharing the contents of a conversation in traditional chats and groups.