Tag: malware

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Multi-platform malware threats are increasingly targeting the same infrastructure agenc

What Small Businesses Can Learn from SilverFox’s Advanced BYOVD and ValleyRAT Attack

Attack techniques once reserved for nation-state operations are incre

SolarWinds ARM Hard-Coded Key Vulnerability: What Public-Sector Teams Need to Know

SolarWinds has released security updates for Access Rights Manager (ARM

Windows 11 USB Auto-Install Vulnerability: What Small Businesses Need to Know

Security researchers have demonstrated a way to turn a normal Windows featur

How Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Windows Hello for Business is designed to make sign-ins easier and mo

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Recent research has highlighted active attacks against two widely used open-sour

Fastjson 1.x RCE Vulnerability Actively Exploited With No Patch Available

Organizations using Fastjson 1.x in Java applications, especially those built wi

Weekly Security Recap for Public-Sector Web Teams: AI Misfires, Metabase 0‑Day, Supply-Chain Risk, and Network Backdoors

Many cyber incidents in governmen

HollowFrame and Matryoshka: What a Law Firm Attack Teaches Public Agencies About Web and Email Security

A recent spear-phishing campaign against a law fir

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Keycloak is widely used across public-sector and community