Chinese Cyber Espionage Group UNC3886 Backdoored Juniper Routers

UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected...

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX Series routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. "The backdoors had varying...

Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack

Threat intelligence firm GreyNoise is warning of a "coordinated surge" in the exploitation of Server-Side Request Forgery SSRF vulnerabilities spanning multiple platforms. "At least 400 IPs have been seen actively exploiting multiple SSRF CVEs simultaneously, with notable overlap between attack...

CVE-2025-211996

creationtimestamp| type| source ---|---|--- 2025-03-11 17:45:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0081...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-27912

creationtimestamp| type| source ---|---|--- 2025-03-11 08:38:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7120 2025-03-11 09:31:03+00:00| seen| Telegram/VmMuGE7Rb8M0CTKtbBCx8A-ZtXlhfTER7CBMGSEtWA4Slk 2025-03-11 09:48:37+00:00| seen|...

CVE-2025-1661

creationtimestamp| type| source ---|---|--- 2025-03-11 04:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk3arnhszz2m 2025-03-11 05:36:15+00:00| published-proof-of-concept| Telegram/nGCSDP4vCltArA3VXeokA5jE1t269Apyi28mkZBPrFAwc4I 2025-03-11 05:48:30+00:00| seen|...

Should a VM specialist be aware of what is happening in the Darknet?

Should a VM specialist be aware of what is happening in the Darknet? Of course. At least roughly. Otherwise, he'll fall for the "nobody’s attacking us" myth. The reality is that every organization is under attack all the time. It's like commercial fishing with trawlers. Anything that gets caught ...

CVE-2025-25306

creationtimestamp| type| source ---|---|--- 2025-03-10 19:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk2cmbftsd2v 2025-03-10 19:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114139864871772564 2025-03-10 23:13:49+00:00| seen|...

CVE-2025-27616

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7043 2025-03-10 19:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114139864972627449 2025-03-10 23:13:46+00:00| seen|...

Why The Modern Google Workspace Needs Unified Security

The Need For Unified Security Google Workspace is where teams collaborate, share ideas, and get work done. But while it makes work easier, it also creates new security challenges. Cybercriminals are constantly evolving, finding ways to exploit misconfigurations, steal sensitive data, and hijack...

⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

Cyber threats today don't just evolve—they mutate rapidly, testing the resilience of everything from global financial systems to critical infrastructure. As cybersecurity confronts new battlegrounds—ranging from nation-state espionage and ransomware to manipulated AI chatbots—the landscape become...

CVE-2024-12035

creationtimestamp| type| source ---|---|--- 2025-03-07 08:35:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6819 2025-03-07 11:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114120991550927514 2025-03-08 04:34:56+00:00| seen|...

PHP-CGI RCE Flaw Exploited in Attacks on Japan's Tech, Telecom, and E-Commerce Sectors

Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting organizations in Japan since January 2025. "The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution RCE flaw in the PHP-CGI implementation of PHP on Windows, to gai...

CVE-2025-25361

creationtimestamp| type| source ---|---|--- 2025-03-06 22:12:27+00:00| seen| https://t.me/cvedetector/19740 2025-03-07 20:40:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6883 2025-03-07 21:49:00+00:00| seen|...

Who is Responsible and Does it Matter?

Welcome to this week's edition of the Threat Source newsletter. At Talos we bat on behalf of our customers, protecting them against all manner of cyber threats that may affect them. The nature of the threat actor and their origin or affiliation makes no difference; if they are attacking or planni...

US Charges 12 in Chinese Hacker Network, Offers $10M Reward

U.S. indicts 12 in Chinese Hacker-for-Hire Network tied to cyber attacks on governments & media. DOJ offers $10M reward for info on key suspects...

Outsmarting Cyber Threats with Attack Graphs

Cyber threats are growing more sophisticated, and traditional security approaches struggle to keep up. Organizations can no longer rely on periodic assessments or static vulnerability lists to stay secure. Instead, they need a dynamic approach that provides real-time insights into how attackers...

How I became a Cyber Essentials Plus assessor

TL;DR What is Cyber Essentials and why does it matter? The role of Cyber Essentials CE and Cyber Essentials Plus CE+ assessors in protecting UK businesses The difference between a CE and CE+ assessor Becoming a CE assessor Becoming a CE+ assessor Challenges I faced and tips for success Introducti...

CVE-2024-48246

creationtimestamp| type| source ---|---|--- 2025-03-05 19:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrds4wdd2h 2025-03-05 22:47:49+00:00| seen| https://t.me/cvedetector/19658 2025-03-06 15:10:41+00:00| published-proof-of-concept|...