Aggregator
CVE-2025-61664 | GNU grub2 normal_exit expired pointer dereference (EUVD-2025-198079 / Nessus ID 275740)
CVE-2025-61661 | GNU grub buffer size (EUVD-2025-198081 / Nessus ID 275745)
CVE-2025-54770 | GNU grub2 Network net_set_vlan expired pointer dereference (EUVD-2025-198077 / Nessus ID 275747)
Pear
You must login to view this content
Pear
You must login to view this content
Pear
You must login to view this content
Russia accuses former Radio Free Europe journalist of aiding cyberattacks for Ukraine
CVE-2026-34538 | Apache Airflow up to 3.1.8 DagRun Wait Endpoint exposure of resource (EUVD-2026-20878)
CVE-2025-57735 | Apache Airflow up to 3.1.x JWT Token session expiration (EUVD-2025-209371)
CVE-2026-34185 | Hydrosystem Control System up to 9.8.4 sql injection (EUVD-2026-20886)
CVE-2026-21388 | Mattermost Plugins up to 2.3.1 Lifecycle Webhook Endpoint allocation of resources (EUVD-2026-20880)
CVE-2026-24661 | Mattermost Plugins up to 2.1.3 Changes Webhook Endpoint allocation of resources (EUVD-2026-20882)
CVE-2026-4901 | Hydrosystem Control System up to 9.8.4 log file (EUVD-2026-20888)
New ClickFix Campaign Uses macOS Script Editor to Deliver Atomic Stealer
A newly discovered ClickFix campaign is targeting macOS users through a technique that completely bypasses Terminal, using Script Editor to drop the Atomic Stealer infostealer onto compromised systems. This campaign marks a clear shift in how attackers are responding to Apple’s tightening security controls — a sharp reminder that social engineering can work around almost […]
The post New ClickFix Campaign Uses macOS Script Editor to Deliver Atomic Stealer appeared first on Cyber Security News.
Работа мечты: вы нам код, мы вам вирус. Тестовые задания стали опаснее сомнительных сайтов
Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees
Microsoft Incident Response – Detection and Response Team (DART) researchers observed an emerging, financially motivated threat actor, tracked as Storm-2755, compromising Canadian employee accounts to gain unauthorized access to employee profiles and divert salary payments to attacker-controlled accounts.
The post Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees appeared first on Microsoft Security Blog.
Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees
Microsoft Incident Response – Detection and Response Team (DART) researchers observed an emerging, financially motivated threat actor, tracked as Storm-2755, compromising Canadian employee accounts to gain unauthorized access to employee profiles and divert salary payments to attacker-controlled accounts.
The post Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees appeared first on Microsoft Security Blog.