LogoVulnerable U
Read
Watch
Jobs
Membership
Login
Subscribe

Archive

News

Microsoft Fixes Three Exploited Windows Hyper-V Bugs

Jan 15, 2025

•

3 min read

Microsoft Fixes Three Exploited Windows Hyper-V Bugs

The three Windows Hyper-V vulnerabilities (CVE-2025-21333, CVE-2025-21334 and CVE-2025-21335) are being exploited.

Newsroom
Newsroom

China

+1

FBI Removes PlugX Malware From Thousands of PCs

Jan 14, 2025

•

3 min read

FBI Removes PlugX Malware From Thousands of PCs

The operation was made possible by the efforts of French authorities, who gained access to the C2 server

Newsroom
Newsroom

News

Threat Actors Exploit Fortinet Flaw in Firewall Attacks

Jan 14, 2025

•

3 min read

Threat Actors Exploit Fortinet Flaw in Firewall Attacks

Fortinet released patches for an authentication bypass bug that is being exploited in the wild.

Newsroom
Newsroom

AI

+1

Microsoft Alleges Group Abused Azure OpenAI to Produce Illicit Images

Jan 13, 2025

•

4 min read

Microsoft Alleges Group Abused Azure OpenAI to Produce Illicit Images

The operation was used to generate AI images from DALL-E using stolen API keys

Newsroom
Newsroom

News

Fake Windows LDAP Exploit Deploys Malware

Jan 13, 2025

•

3 min read

Fake Windows LDAP Exploit Deploys Malware

Threat actors are trying to trick security researchers with fake PoC exploit code for a recently disclosed, high-severity Windows LDAP flaw.

Newsroom
Newsroom

China

+1

China's RedDelta APT Shifts Tactics to Deliver Custom PlugX Backdoor

Jan 10, 2025

•

3 min read

China's RedDelta APT Shifts Tactics to Deliver Custom PlugX Backdoor

The group is highly capable and has shown the ability to compromise many different targets

Newsroom
Newsroom

Newsletter

🎓️ Vulnerable U | #098

Jan 10, 2025

•

13 min read

🎓️ Vulnerable U | #098

Gravy Analytics massive location data breach, Fake nuclear scare breakdown, License plate cameras open to the public, and so much more!

Matt Johansen
Matt Johansen

News

Ivanti Warns of Connect Secure Zero-Day Attacks

Jan 8, 2025

•

4 min read

Ivanti Warns of Connect Secure Zero-Day Attacks

Threat actors are exploiting a vulnerability in Ivanti Connect Secure appliances.

Newsroom
Newsroom

News

Meta: Fact-Checking is So 2024

Jan 8, 2025

•

4 min read

Meta: Fact-Checking is So 2024

The company is abandoning fact-checking services in favor of community notes

Newsroom
Newsroom

News

Casio Ransomware Attack Impacted Over 8K People

Jan 8, 2025

•

3 min read

Casio Ransomware Attack Impacted Over 8K People

Some Casio employees reported receiving spam messages that may be related to the incident.

Newsroom
Newsroom

News

U.S. Health Dept Announces $80K Settlement Linked to Ransomware Attack

Jan 7, 2025

•

3 min read

U.S. Health Dept Announces $80K Settlement Linked to Ransomware Attack

The U.S. government is trying to crack down harder on HIPAA violations that lead to ransomware attacks.

Newsroom
Newsroom

News

Location Data Giant Gravy Analytics Breach

Jan 7, 2025

•

7 min read

Location Data Giant Gravy Analytics Breach

Hackers say they've stolen an absolute ton of sensitive location data, and are blackmailing the company they stole it from.

Matt Johansen
Matt Johansen
Load more
Vulnerable U

Vulnerable U

Infosec's favorite weekly newsletter for news, tools, and tips with 38,000+ CISOs, founders, change-makers, and straight up hackers.


Home

Posts

Authors

Account

Upgrade

Sponsors

Sponsors