LogoVulnerable U
Read
Watch
Jobs
Membership
Login
Subscribe

Archive

News

+1

U.S. Imposes Sanctions on Chinese Company With Flax Typhoon Links

Jan 3, 2025

•

3 min read

U.S. Imposes Sanctions on Chinese Company With Flax Typhoon Links

The U.S. Treasury Department on Friday announced sanctions against a Beijing-based cybersecurity company with links to state-sponsored threat group Flax Typhoon.

Newsroom
Newsroom

News

Nasty Bug Fixed in iTerm2 Terminal Emulator

Jan 3, 2025

•

2 min read

Nasty Bug Fixed in iTerm2 Terminal Emulator

The flaw mistakenly logged all input and output of SSH session in a readable file on remote hosts

Newsroom
Newsroom

News

+1

U.S. Lawmakers Demand Answers After Treasury Department Hack

Jan 3, 2025

•

4 min read

U.S. Lawmakers Demand Answers After Treasury Department Hack

After the Treasury Department disclosed a major security incident by a Chinese APT, U.S. lawmakers are asking for more information on the cyberattack.

Newsroom
Newsroom

Newsletter

🎓️ Vulnerable U | #097

Jan 3, 2025

•

13 min read

🎓️ Vulnerable U | #097

U.S. Army is having a week full of arrests, China hacked the U.S. Treasury, 35 more extensions hacked by CyberHaven hackers, and much more!

Matt Johansen
Matt Johansen

Iran

+2

U.S. Government Sanctions IRGC and GRU Affiliates for Attempted Election Interference

Dec 31, 2024

•

3 min read

U.S. Government Sanctions IRGC and GRU Affiliates for Attempted Election Interference

The sanctions restrict the people and organizations ability to do business in the U.S.

Newsroom
Newsroom

News

U.S. Treasury Department Hit by Chinese APT in 'Major' Cyberattack

Dec 30, 2024

•

4 min read

U.S. Treasury Department Hit by Chinese APT in 'Major' Cyberattack

Chinese APT threat actors were able to access certain Treasury Department user workstations and unclassified documents.

Newsroom
Newsroom

News

Palo Alto Networks: Threat Actors Targeting PAN-OS Flaw

Dec 27, 2024

•

3 min read

Palo Alto Networks: Threat Actors Targeting PAN-OS Flaw

Threat actors are currently targeting a denial-of-service vulnerability in the DNS Security feature of the PAN-OS software.

Newsroom
Newsroom

Newsletter

🎓️ Vulnerable U | #096

Dec 27, 2024

•

14 min read

🎓️ Vulnerable U | #096

Phished employee pushed malicious chrome extension, Lockbit dev arrested, FBI shuts down secret Chinese police station in NYC, and more!

Matt Johansen
Matt Johansen

News

Breaking: Cyberhaven Chrome Extension Compromised in Holiday Attack Campaign

Dec 26, 2024

•

7 min read

Breaking: Cyberhaven Chrome Extension Compromised in Holiday Attack Campaign

An attacker successfully phished a Cyberhaven employee, gained access to Chrome Web Store admin credentials, published a malicious version of the extension

Matt Johansen
Matt Johansen

News

U.S. Charges Alleged LockBit Ransomware Developer

Dec 20, 2024

•

4 min read

U.S. Charges Alleged LockBit Ransomware Developer

The U.S. on Friday announced charges against a dual Russian and Israeli national for his alleged role as a developer of the infamous LockBit ransomware group.

Newsroom
Newsroom

News

BeyondTrust PRA and RS Flaw Under Active Attack

Dec 20, 2024

•

2 min read

BeyondTrust PRA and RS Flaw Under Active Attack

The company pushed a fix for CVE-2024-12356 to all cloud customers

Newsroom
Newsroom
🎓️ Vulnerable U | #095

Dec 20, 2024

•

16 min read

🎓️ Vulnerable U | #095

Cybercrime marketplace takedown, Cleo attacks claimed by Clop, Struts, Fortinet, and Microsoft 0days, and more!

Matt Johansen
Matt Johansen
Load more
Vulnerable U

Vulnerable U

Infosec's favorite weekly newsletter for news, tools, and tips with 38,000+ CISOs, founders, change-makers, and straight up hackers.


Home

Posts

Authors

Account

Upgrade

Sponsors

Sponsors