Browsing: News

Attacker infrastructure often persists for months. Tools like GoPhish, GOST, and Metasploit regularly remained online for the full 90-day analysis…

CVE-2025-53652 was disclosed as medium severity, but it enables command injection via the Jenkins Git Parameter plugin.Around 15,000 Jenkins servers…

This year marked my 10th anniversary of parking myself in Vegas for a week of hacker summer camp, running into…

The Figure breach exposed 967,200 email records without a single exploit. Understanding what that enables — and why your MFA…

By: The Center for Internet Security® (CIS®) Cyber Threat Intelligence (CTI) team Published August 27, 2025 In the first half…

Hackers hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla, and pushed a malicious…

By: The Center for Internet Security® (CIS®) Cyber Threat Intelligence (CTI) team Published September 11, 2025 In Quarter 2 (Q2)…

The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app…

Hundreds of ScriptCase instances remain exposed a month after disclosure, with attackers actively scanning for them.Exploitation is simple, requiring only…

Welcome back to the Abstract! Here are the studies this week that were ritually sacrificed, kicked out of the galaxy,…