Archive

🎓️ Vulnerable U | #117

Microsoft massive malware takedown, Russia hacking Ukraine logistics targets, 100s of fake Chrome extensions, and much more!

Matt Johansen

Microsoft

World’s Largest Infostealer Malware Disrupted: Lumma Stealer Crackdown

May 21, 2025

•

6 min read

World’s Largest Infostealer Malware Disrupted: Lumma Stealer Crackdown

Microsoft Seizes 2,300 Lumma Stealer Domains in Global Takedown. Here's what you need to know.

Matt Johansen

Newsletter

May 16, 2025

•

15 min read

🎓️ Vulnerable U | #116

Coinbase breached by insider threat, North Korean IT Workers unmasked, Deepdive into passkeys, AI Note taking app security nightmare, and much more!

Matt Johansen

News

May 13, 2025

•

3 min read

ASUS Patches RCE Bugs in DriverHub

The two vulnerabilities can be chained together to gain RCE

Newsroom

Hard-coded API key in AI note taking app exposed users’ private meeting transcripts

May 12, 2025

•

4 min read

Hard-coded API key in AI note taking app exposed users’ private meeting transcripts

Impact limited to TestFlight users; bug fixed before public release.

Matt Johansen

Newsletter

May 9, 2025

•

15 min read

🎓️ Vulnerable U | #115

Massive Cisco 0day, New Russian malware intel, 38,000 domains ID'd in crypto draining operation, NSO spyware hit with massive fine, and much more!

Matt Johansen

News

Russian COLDRIVER Threat Group Using New LOSTKEYS Malware

May 8, 2025

•

3 min read

Russian COLDRIVER Threat Group Using New LOSTKEYS Malware

The new malware is called LOSTKEYS and is designed to steal files from a number of different directories

Newsroom

News

CISA Warns of OT Attacks By Lower-Level Adversaries

May 7, 2025

•

2 min read

CISA Warns of OT Attacks By Lower-Level Adversaries

In a new advisory, the agencies–including the Environmental Protection Agency and Department of Energy–said that they are seeing an uptick in the number of attacks against OT networks by non-APT teams

Newsroom

Newsletter

May 2, 2025

•

17 min read

🎓️ Vulnerable U | #114

North Korean IT workers, Google zero day report, Apple AirPlay vulns, neat new malware tricks, and much more!

Matt Johansen

News

Commvault CVE-2025-3928 Targeted by Attackers

May 1, 2025

•

2 min read

Commvault CVE-2025-3928 Targeted by Attackers

Microsoft alerted the company to the issue in February

Newsroom

Google Data Shows Drop in Zero Days in 2024, But More Focus on Security Products

Apr 29, 2025

•

3 min read

Google Data Shows Drop in Zero Days in 2024, But More Focus on Security Products

Attackers are continuing to focus their efforts on valuable targets such as edge security and networking devices

Newsroom

SAP CVE-2025-31324 Targeted by Attackers

Apr 28, 2025

•

3 min read

SAP CVE-2025-31324 Targeted by Attackers

A recently disclosed vulnerability in SAP’s NetWeaver product is being actively exploited by attackers

Newsroom

🎓️ Vulnerable U | #117

World’s Largest Infostealer Malware Disrupted: Lumma Stealer Crackdown

🎓️ Vulnerable U | #116

ASUS Patches RCE Bugs in DriverHub

Hard-coded API key in AI note taking app exposed users’ private meeting transcripts

🎓️ Vulnerable U | #115

Russian COLDRIVER Threat Group Using New LOSTKEYS Malware

CISA Warns of OT Attacks By Lower-Level Adversaries

🎓️ Vulnerable U | #114

Commvault CVE-2025-3928 Targeted by Attackers

Google Data Shows Drop in Zero Days in 2024, But More Focus on Security Products

SAP CVE-2025-31324 Targeted by Attackers

Vulnerable U

Home

Account

Sponsors