ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Welcome to this week’s Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it’s a critical zero-day, the next it’s a wave of phishing lures or a state-backed disinformation push. Each...

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Welcome to this week's Threatsday Bulletin —your Thursday check-in on the latest twists and turns in cybersecurity and hacking. The digital threat landscape never stands still. One week it's a critical zero-day, the next it's a wave of phishing lures or a state-backed disinformation push. Each...

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

A threat activity cluster has been observed targeting fully-patched end-of-life SonicWall Secure Mobile Access SMA 100 series appliances as part of a campaign designed to drop a backdoor called OVERSTEP. The malicious activity, dating back to at least October 2024, has been attributed by the Goog...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an issue with overstepping authority to obtain foreground application information. The...

Logic flaw vulnerability in the backend of the Ruyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. If the backend of the management system has a logic flaw vulnerability. Attackers can use the vulnerability to overstep the...

Parallel overstepping vulnerability in Liangjing Mall online store shopping system

Liangjing Mall Online Shop Shopping System is a set of multi-functional online store system that can be suitable for different types of commodities, super flexible, three-tier distribution PC+Mobile+Micro-site. There is a parallel override vulnerability in LiangJing Mall Online Shop Shopping...

Beijing 263 Enterprise Communication Co., Ltd. live online school has a logic flaw vulnerability

Beijing 263 Enterprise Communication Co., Ltd abbreviated as: 263 Enterprise Communication, provides one-stop online education service solutions combining hardware and software for the education industry. Beijing 263 Enterprise Communication Co., Ltd. live online school there is a logic flaw...

Unauthorized Access Vulnerability in Super Star Huiya Digital Book Documentation Service System

Beijing Century Super Star Information Technology Development Limited Liability Company Super Star is one of the companies engaged in the digitization of paper materials and the production of electronic publications. An unauthorized access vulnerability exists in the Super Star Huiya Digital Book...