Avakian recommends updating all clients and bots, including any applications, integrations, or automated tools connected to a Matrix server. Connections to external sites should be limited where possible, and administrators and key users should be alerted about the changes immediately.… Read More "Matrix protocol bugs could let hackers seize control of sensitive chat rooms"
Users who cannot upgrade are advised to filter communications on port 7900, which is used by the phMonitor component to monitor the health of system processes and to distribute tasks to them. Fortinet also fixed a high severity authentication bypass… Read More "Fortinet patches critical flaw with public exploit in FortiSIEM"
An ongoing malware campaign active throughout 2025 is using malvertising to deliver a sophisticated PowerShell-based framework. According to Cisco Talos researchers, the malware is named “PS1Bot” due to its similarities with the AHK Bot malware family. It deploys multiple malicious… Read More "Malvertising Campaign Deploys Modular PowerShell Malware PS1Bot"
Aug 14, 2025Ravie LakshmananServer Security / Vulnerability Multiple HTTP/2 implementations have been found susceptible to a new attack technique called MadeYouReset that could be explored to conduct powerful denial-of-service (DoS) attacks. “MadeYouReset bypasses the typical server-imposed limit of 100 concurrent… Read More "New HTTP/2 ‘MadeYouReset’ Vulnerability Enables Large-Scale DoS Attacks"
A vulnerability in KernelSU version 0.5.7 that could allow attackers to impersonate its manager application and gain root access has been uncovered by cybersecurity researchers. According to Zimperium’s zLabs researchers, the flaw highlights ongoing weaknesses in rooting and jailbreaking frameworks,… Read More "KernelSU v0.5.7 Flaw Lets Android Apps Gain Root Access"
Organizations face mounting pressure from cyber threats that exploit detection delays. Industry data shows breach costs averaging $4.45 million per incident, with late detection driving exponential damage. Attackers typically operate undetected for 197 days, establishing deep network presence before discovery. … Read More "Indicators of Compromise in Threat Intelligence: Real-Time Action"
Aug 14, 2025Ravie LakshmananThreat Intelligence / Linux Japan’s CERT coordination center (JPCERT/CC) on Thursday revealed it observed incidents that involved the use of a command-and-control (C2) framework called CrossC2, which is designed to extend the functionality of Cobalt Strike to… Read More "Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS"
One allowed SSRF, the other revealed sensitive keys One of the flaws, CVE-2025-8341, lurked in Infinity’s URL allow-list check. By slipping an ‘@’ symbol into a crafted URL, attackers could trick Grafana into sending server-side requests (SSRF) to internal endpoints,… Read More "Flaws in a pair of Grafana plugins could hand over DevOps control"
Cybercriminals are selling access to active law enforcement and government email accounts for as little as $40 on the dark web, according to an investigation by Abnormal AI. These compromised accounts belong to officials from the US, UK, India, Brazil… Read More "Hacked Law Enforcement and Government Email Accounts Sold on Dark Web"
Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication (NFC) to conduct relay attacks for facilitating fraudulent transactions in attacks targeting banking customers in Brazil. “PhantomCard relays NFC data from a victim’s banking card to… Read More "New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits"
