Ransomware gangs target SonicWall vulnerability
SonicWall is urging customers affected by CVE-2024-40766 to "please apply the patch as soon as possible."
2 minutes
News
At last! Microsoft calls time on ActiveX in Office 2024
When Office 2024 is released next month, ActiveX controls will be off by default in client apps like Word, Excel,…
2 minutes
Patch now! Zero-day used to target ISPs and MSPs
A patch is now available for a high severity vulnerability in Versa Director that can be used to compromise ISPs,…
2 minutes
Ransomware payments on track to smash $1.1 billion record
Median payments to some strains are now $1.5 million—a 650% increase from early 2023.
1 minute
Update now! August Patch Tuesday covers several zero-days
Microsoft’s August Patch Tuesday covers 90 Microsoft CVEs and includes nine actively-exploited zero-days.
2 minutes
Patch now! Microsoft Office flaw could leak NTLM hashes
Microsoft is warning about a Microsoft Office vulnerability which an attacker could use to steal NTLM hashes.
3 minutes
Ransomware group disguises SharpRhino trojan as Angry IP Scanner
Researchers have uncovered more details of a Hunters International campaign that uses search ads to spread the SharpRhino RAT.
1 minute
Azure outage was DDoS attack made worse by failed mitigation
Microsoft says the recent outage affecting Azure and other cloud services was down to a DDoS attack and some faulty…
2 minutes
Patch now! ServiceNow vulnerabilities under active exploitation
Up to 42,000 ServiceNow systems may be at risk of compromise.
1 minute
Google Workspace flaw allowed cybercriminals to impersonate domains
Google claims it has since fixed the problem.
2 minutes
22 minutes from PoC exploit to attacks—would you have patched in time?
The speed at which you need to apply patches is increasing. Are you prepared?
2 minutes
GeoServer vulnerability actively abused, CISA warns
CISA has added CVE-2024-36401 to its catalog of known exploited vulnerabilities.
2 minutes
Watch out for CRYSTALRAY, an open source aficionado with a hunger for crypto
The CRYSTALRAY group, tracked by Sysdig, is using a suite of open source tools to find and compromise targets for…
1 minute
Patch now! July Patch Tuesday fixes two actively exploited vulnerabilities
Microsoft's Patch Tuesday covers two actively exploited vulnerabilities, one Office Remote Code Execution (RCE) flaw, and many other CVEs
2 minutes
South Africa’s NHLS is recovering from a ransomware attack quickly, it just doesn’t feel that way
It's estimated that the NHLS handles diagnostic tests for about 80% of South Africa's population. Ransomware groups don't care.
2 minutes
Law enforcement takes out hundreds of malicious Cobalt Strike servers
International law enforcement agencies have revealed a three-year operation to combat Cobalt Strike servers used by cybercriminals.
1 minute
Upgrade now! Juniper releases patch for critical authentication bypass
Juniper Networks has released an out-of-cycle upgrade for a CVSS 10 vulnerability.
1 minute
Upgrade now! New MOVEit Transfer vulnerability under active exploitation
A new vulnerability in MOVEit Transfer is already under active exploitation, just a day after a patch was released.
2 minutes
GrimResource MSC attack uses 5-year-old vulnerability
Cybercriminals' search for an alternative to Office macros has brought them to MSC files used by the Microsoft Management Console.
2 minutes
UEFI vulnerability for Intel processors opens the doors for a bootkit
Researchers have disclosed details of a vulnerability in Phoenix Technologies' firmware for Intel processors.
2 minutes
Sign up to get the latest threat intelligence.
Subscribe to newsletterThreatDown is ranked as a leader in EDR + MDR by G2
