A Critical Flaw in SonicWall Gateways Exposes Enterprise Networks to Remote Attacks A severe security vulnerability has been discovered in SonicWall’s SMA1000 series appliances, potentially putting thousands of enterprise networks at risk. The flaw, which allows remote attackers to exploit server-side request forgery (SSRF) weaknesses, has been patched by SonicWall with a hotfix release. The … Read more
A sophisticated hacking operation has compromised several country-code top-level domains (ccTLDs), allowing attackers to hijack Google’s domains in Ghana, American Samoa, and Sierra Leone. The breach not only affected Google but also other organizations within these ccTLDs, highlighting a critical vulnerability in the way domain name system (DNS) records are managed. The attack began with … Read more
The ongoing FortiBleed attacks have left thousands of Fortinet FortiGate firewalls and SSL VPN gateways vulnerable to hackers, who are using compromised credentials to lock out legitimate administrators. The Federal Bureau of Investigation (FBI) has issued a warning about the attacks, which have been linked to ransomware operations and have affected over 86,644 devices across … Read more
A Ransomware Recovery CEO’s Dirty Secret: Charging Victims Twice, Paying Attackers In a stunning case of alleged deceit, Zohar Pinhasi, 50, owner of Florida-based ransomware remediation company MonsterCloud, has been charged with conspiracy to commit wire fraud and two counts of wire fraud. Prosecutors claim that instead of using proprietary technology to recover encrypted data, … Read more
Ransomware groups have shifted their focus to targeting backup infrastructure, raising the stakes for organizations that rely on these safety nets in case of an attack. The financial costs of losing a backup can be devastating, with average incident costs reaching $5.08 million and reputational damage affecting up to 41% of victims. The attacks on … Read more
A sophisticated attack has compromised several country-code top-level domains (ccTLDs), allowing hackers to hijack Google domains and issue unauthorized HTTPS certificates. The attackers breached third-party operators managing ccTLD registries in Ghana, American Samoa, and Sierra Leone, modifying authoritative DNS records to point domains to infrastructure under their control. This maneuver enabled the threat actor to … Read more
SonicWall’s Critical Patch for SMA1000 Appliances Marks a High-Stakes Reminder of the Importance of Regular Security Updates A severe pre-authentication vulnerability in SonicWall’s Secure Mobile Access (SMA) 1000 appliances has been patched by the company, following an assessment that classified it as a CVSS 10.0 flaw – the highest rating on the Common Vulnerability Scoring … Read more
Malicious npm Packages Infect Thousands of Developers with Overlord RAT and Stealer Malware A devastating wave of malware infections has swept through the developer community, courtesy of eight malicious packages uploaded to the popular npm package repository. Dubbed “Overlord”, this insidious malware has already been downloaded over 40,767 times from the unsuspecting public. The repercussions … Read more
Hackers have successfully hijacked three top-level domain (TLD) registries, allowing them to obtain digital certificates for several Google domains. The affected registries are .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). This brazen attack has left security experts scrambling to understand the scope of the breach and its potential impact on online trust. The … Read more
Critical Vulnerability in Atlassian Products Exploited in Attacks After Public PoC Release A critical vulnerability in multiple Atlassian product families has been exploited by hackers after a detailed technical report was published online. The flaw, identified as CVE-2026-21589, allows an unauthenticated attacker to access specific files in the application’s web root directory if they know … Read more