6523 matches found
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware
Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilitate the deployment of Medusa ransomware. The vulnerability is CVE-2025-10035 CVSS score: 10.0, a critical deserialization bug that could...
EUVD-2020-27176
Malware in sbrugna...
EUVD-2020-27177
Malware in sbrugna...
EUVD-2020-21336
Malware in sbrugna...
EUVD-2018-11278
Malware in sbrugna...
EUVD-2020-30271
Malware in sbrugna...
EUVD-2020-5022
Malware in sbrugna...
EUVD-2020-30270
Malware in sbrugna...
Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT's License Servlet, which is tracked as CVE-2025-10035 and has a CVSS score of 10.0. The vulnerability could allow a threat actor with a validly forged license response...
Defending against database ransomware attacks
How attackers exploit exposed databases for extortion—and the defenses that work...
CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild
Overview On Saturday, October 4, 2025, Oracle published an advisory and accompanying patch for CVE-2025-61882. This new vulnerability affects the Oracle Concurrent Processing product within Oracle E-Business Suite EBS, and has a CVSS score of 9.8 Critical. Per the vendor advisory, the vulnerabili...
EUVD-2024-48579
Malicious code in bioql PyPI...
EUVD-2025-15660
Malicious code in bioql PyPI...
EUVD-2025-18350
Malicious code in bioql PyPI...
EUVD-2023-34457
Malicious code in bioql PyPI...
EUVD-2025-6964
Malicious code in bioql PyPI...
EUVD-2023-35425
Malicious code in bioql PyPI...
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
From unpatched cars to hijacked clouds, this week's Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome's settings t...
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Google Mandiant and Google Threat Intelligence Group GTIG have disclosed that they are tracking a new cluster of activity possibly linked to a financially motivated threat actor known as Cl0p. The malicious activity involves sending extortion emails to executives at various organizations and...
