cyberpress

ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down

Attackers abused a compromised credential from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer ...
cyberpress

Multiple MOVEit Transfer Flaws Could Let Attackers Bypass MFA and Access Sensitive Data

Progress has disclosed 12 security vulnerabilities in MOVEit Transfer that could expose sensitive information, undermine ...
cyberpress

Hackers Exploit Critical Nextcloud Collabora Flaw to Execute Remote Commands

Hackers are exploiting a critical vulnerability in Nextcloud’s built-in Collabora Online CODE Server app to run operating ...
cyberpress

CISA Warns Hackers Are Exploiting Palo Alto PAN-OS Zero-Day to Gain Root Access

The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Palo Alto Networks PAN-OS vulnerability, ...
cyberpress

Indian Government Warns SideCopy Hackers Are Targeting Organizations With ReverseRAT Malware

Indian authorities have warned that the SideCopy advanced persistent threat group is targeting Indian organisations, ...
cyberpress

Proofpoint Acquires Varonis in $6.3 Billion Deal to Expand AI Security

Proofpoint has signed a definitive agreement to acquire Varonis in an all-cash transaction valued at approximately $6.3 ...
cyberpress

37-Year-Old OpenBSD Kernel Flaw Lets Attackers Gain Root Access – PoC Released

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges.
cyberpress

PoC Exploit Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability

A public proof-of-concept exploit is available for CVE-2026-35616, a critical authentication and authorization bypass ...
cyberpress

Multiple NGINX Vulnerabilities Could Allow Remote Attackers to Crash Servers and Execute Malicious Code

F5 disclosed three memory corruption vulnerabilities affecting NGINX Plus, NGINX Open Source, and several related products on ...
cyberpress

China-Linked Hackers Exploit Critical BeyondTrust Zero-Day to Steal Credentials

A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support zero-day to compromise appliances, ...
cyberpress

Ahold Delhaize Network Security Incident Triggers Precautionary System Shutdowns

Ahold Delhaize has taken some systems offline after detecting a security issue in its network. Stores are open and serving ...
cyberpress

Hackers Exploit Critical WordPress Flaws to Execute Remote Code Without Authentication

A critical WordPress exploit chain dubbed WP2Shell lets unauthenticated attackers run arbitrary code on vulnerable websites ...