APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

A sophisticated backdoor, linked to a notorious Russian hacking group, has been detected targeting European government and diplomatic organizations. The malware, known as HOOKEDGE, is part of a larger campaign that exploits vulnerabilities in Microsoft Exchange servers to gain unauthorized access to sensitive systems. What’s alarming is the ease with which hackers can use compromised … Read more

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

A critical zero-day vulnerability in PaperCut, a widely used print management software, has been exploited by attackers to gain unauthorized access to sensitive systems. The exploit affects all versions of the Next Generation (NG) and Managed Folder (MF) editions of PaperCut, making it a significant concern for organizations that rely on these products. PaperCut is … Read more

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

A recent investigation has exposed a critical security vulnerability in certain China-made ZBT routers, which have been shipping with two implants that grant unauthenticated attackers root access. This alarming discovery affects thousands of users worldwide who rely on these routers for their internet connectivity. The issue lies in the design of the ZBT routers’ firmware, … Read more

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

A trio of critical vulnerabilities, each rated a perfect 10.0 on the CVSS scale, has been discovered in ServiceNow’s platform. These flaws could allow unauthenticated attackers to execute code and even manipulate SQL databases, leaving millions of users vulnerable to potential breaches. The issue affects various aspects of the ServiceNow system, including its web application, … Read more

Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security

Okta’s Shares Surge as Identity Security Firm Sees Strong Demand for AI-Powered Solutions Shares of Okta, a leading identity security company, have surged by over 19% after reporting impressive second-quarter financial results. The company’s revenue rose 11% year-over-year to $805 million, driven largely by growing demand for its artificial intelligence (AI) powered solutions. Okta’s subscription … Read more

PaperCut Releases Emergency Patch for Exploited Zero-Day

Critical Vulnerability Exploited in PaperCut Software Leaves Thousands Exposed A severe zero-day vulnerability in PaperCut’s print management solutions has been exploited in the wild, prompting an emergency patch release from the company. The flaw, which affects PaperCut NG and MF versions, allows attackers to gain unauthorized access to the application server, potentially leading to data … Read more

Windows 11 KB5120998 update released with 35 changes and fixes

Microsoft has released a new preview update for Windows 11, dubbed KB5120998, which brings a host of improvements to the operating system. This optional non-security update is designed to test bug fixes, features, and quality enhancements before they’re rolled out to all users during next month’s Patch Tuesday release. The KB5120998 update affects Windows 11 … Read more

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

A notorious state-sponsored hacking group has unleashed a sophisticated backdoor into European government and diplomatic organizations, exploiting vulnerabilities in software development tools to gain deep access to sensitive systems. The malware, linked to APT28, a well-known Russian threat actor, is designed to evade detection and provide attackers with a persistent foothold on compromised networks. The … Read more

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

A Zero-Day Exploit in PaperCut Software Exposes Organizations to Data Breaches and Identity Theft A severe vulnerability has been discovered in the popular print management software, PaperCut. The zero-day exploit, which affects all versions of PaperCut, allows attackers to gain unauthorized access to sensitive information and escalate privileges across domains. This means that organizations using … Read more