…The company released security updates and urged customers to upgrade to fixed software versions, stating that no workarounds were available. New exploitation details emerge In a report published today, Mandiant revealed that…
…The Shai-Hulud campaigns started last September and continue to affect multiple software ecosystems, such as npm, PyPI, and Composer to a lesser degree. The malware compromises maintainer accounts or publishing tokens…
…Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric." Cisco Catalyst SD-WAN is a software-based networking…
…We will share additional updates as appropriate." While the company has yet to attribute this breach, the ShinyHunters extortion group has claimed responsibility on their dark web leak site. The cybercrime gang…
…Critical flaw in PLM products CISA has also added CVE-2026-12569 to the KEV catalog, an improper input validation flaw impacting the PTC Windchill and FlexPLM software products. Both are product…
…According to the researchers, NOVupdate.exe is a signed updater for G Data security solutions that the hacker uses to sideload the malicious avk.dll and the encrypted NOVupdate.exe.dat file…
Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks By Sergiu Gatlan June 15, 2026 01:12 PM Cisco has released security updates to address a vulnerability in the Catalyst…
…Xsolis is a U.S.-based healthcare firm that develops AI-powered software used by more than 600 hospitals and health insurers for utilization management, medical necessity reviews, patient status determinations, discharge…
…as a data wiper for large files Hackers exploit TrueConf zero-day to push malicious software updates Discord E2EE Encryption End-to-end encryption Video Conferencing Bill Toulas Bill Toulas is a…
…22-01 directive are required to apply the vendor-provided security updates and mitigations, or to stop using the impacted software. CISA set the deadline for June 5 . However, the KEV also…