Archive

Experts Flag Security, Privacy Risks in DeepSeek AI App

Security experts warn that the DeepSeek AI app exposes users to serious risks, including unencrypted data transmission, hardcoded encryption keys, and advanced device fingerprinting.

Matt Johansen

Microsoft

Thousands of ASP.NET Sites at Risk from Publicly Exposed Machine Keys

Feb 6, 2025

•

8 min read

Thousands of ASP.NET Sites at Risk from Publicly Exposed Machine Keys

Microsoft warns that over 3,000 publicly disclosed ASP.NET machine keys could enable ViewState code injection attacks, leading to remote code execution.

Matt Johansen

cybercrime

Feb 6, 2025

•

2 min read

Thai Government Cuts Power to Areas of Myanmar to Curb Cybercrime Ops

The move is a result of an increase in complaints about romance and financial fraud scams

Newsroom

News

Google Cloud Build Vulnerability Enables Data Destruction Across Projects

Feb 6, 2025

•

7 min read

Google Cloud Build Vulnerability Enables Data Destruction Across Projects

Discover how attackers exploit Google Cloud Build to execute malicious actions, and learn which log events security teams should monitor to detect and prevent cloud-based threats.

Matt Johansen

News

CVE-2024-40891: Zyxel Won’t Patch Exploited Flaws in Legacy Devices

Feb 5, 2025

•

4 min read

CVE-2024-40891: Zyxel Won’t Patch Exploited Flaws in Legacy Devices

Zyxel is urging customers to replace legacy DSL CPE routers impacted by a previously disclosed and targeted vulnerability.

Newsroom

News

North Korean Malware Targets MacOS Devices

Feb 4, 2025

•

3 min read

North Korean Malware Targets MacOS Devices

A new malware sample is one of many macOS variants that are attributed to a DPRK campaign using a job interview lure

Newsroom

News

AMD Flaw Threatens Confidential Computing on Zen Processors

Feb 4, 2025

•

3 min read

AMD Flaw Threatens Confidential Computing on Zen Processors

The bug results from the use of an insecure hash function

Newsroom

News

CISA Warns of Possible Backdoor in CMS8000 Patient Monitoring Devices

Feb 3, 2025

•

5 min read

CISA Warns of Possible Backdoor in CMS8000 Patient Monitoring Devices

The Contec CMS8000 provides continuous monitoring of patients’ heart rate, blood oxygen, pulse, and other vital signs

Newsroom

News

DoJ Seizes Domains Associated With Saim Raza Cybercrime Operation

Jan 31, 2025

•

3 min read

DoJ Seizes Domains Associated With Saim Raza Cybercrime Operation

The department seized 39 domains used to sell cybercrime tools

Newsroom

Newsletter

Jan 31, 2025

•

13 min read

🎓️ Vulnerable U | #101

DeepSeek Mania, Apple 0days, FBI seizing cybercrime domains, Google shares how threat actors are using their AI, and more!

Matt Johansen

News

Europol, FBI Seize Nulled, Cracked Cybercrime Forums

Jan 30, 2025

•

3 min read

Europol, FBI Seize Nulled, Cracked Cybercrime Forums

The law enforcement operation took place between Jan. 28 and 30, and resulted in the arrest of two suspects and the seizure of 17 servers.

Newsroom

News

Phishing Attacks Lead to New TorNet Backdoor

Jan 28, 2025

•

3 min read

Phishing Attacks Lead to New TorNet Backdoor

An ongoing phishing campaign delivers a new, undocumented backdoor called TorNet, as well as Agent Tesla and the Snake keylogger.

Newsroom

Experts Flag Security, Privacy Risks in DeepSeek AI App

Thousands of ASP.NET Sites at Risk from Publicly Exposed Machine Keys

Thai Government Cuts Power to Areas of Myanmar to Curb Cybercrime Ops

Google Cloud Build Vulnerability Enables Data Destruction Across Projects

CVE-2024-40891: Zyxel Won’t Patch Exploited Flaws in Legacy Devices

North Korean Malware Targets MacOS Devices

AMD Flaw Threatens Confidential Computing on Zen Processors

CISA Warns of Possible Backdoor in CMS8000 Patient Monitoring Devices

DoJ Seizes Domains Associated With Saim Raza Cybercrime Operation

🎓️ Vulnerable U | #101

Europol, FBI Seize Nulled, Cracked Cybercrime Forums

Phishing Attacks Lead to New TorNet Backdoor

Vulnerable U

Home

Account

Sponsors