Microsoft 365 users targeted in 2FA-busting phishing campaigns Researchers have uncovered a Phishing-as-a-Service platform that enables criminals to bypass some forms of 2FA. 2 minutes
Compromised F5 BIG-IP appliances abused in three-year infiltration A state-sponsored attacker used compromised F5 load balancers to gain persistence on a target's network. 2 minutes
Microsoftâs April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities Microsoft has fixed 149 vulnerabilities, two of which are reportedly being exploited in the wild. 2 minutes
Update now! ConnectWise ScreenConnect vulnerability needs your attention ConnectWise customers need to take immediate action to remediate a critical vulnerability. 1 minute
LockBit, the world’s worst ransomware, is down LockBit's position as ransomware's biggest beast is suddenly in doubt. 1 minute
Microsoft Exchange vulnerability actively exploited One of Microsoft's Patch Tuesday fixes has flipped from "Likely to be Exploited" to âExploitation Detectedâ. 1 minute
Update now! Microsoft fixes two zero-days on February Patch Tuesday Microsoft has issued patches for 73 security vulnerabilities in its February 2024 Patch Tuesday. 2 minutes
Patch now! Roundcube mail servers are being actively exploited A vulnerability in Roundcube webmail is being actively exploited and CISA is urging users to install an updated version. 1 minute
Ivanti urges customers to patch yet another critical vulnerability Ivanti has found yet another vulnerability in versions of Connect Secure, Policy Secure, and ZTA gateways. 2 minutes