Cyber alerts

Critical Security Incident involving GitHub Action tj-action/changed-files

Projects using the vulnerable action are at risk of exposed CI/CD secrets

Zero-Day Vulnerability CVE-2024-4040 in CrushFTP

A zero-day vulnerability is being exploited in the wild that could allow an attacker to escape the virtual file system (VFS) and download system files

Critical Vulnerability in CrushFTP

The critical vulnerability assigned CVE-2023-43177 could allow remote code execution on affected devices

Malware Persistence within VMware ESXi Hypervisors

Phishing Campaign Uses Fake Adobe Document Cloud Application to Steal Microsoft Credentials

A cyber crime group is using a fake web application masquerading as the Adobe Document Cloud in order to steal credentials for Microsoft Office 365 and Outlook.

Log4Shell Vulnerabilities in VMware Horizon Targeted to Install Web Shells

Attackers are actively targeting Log4Shell vulnerabilities in VMware Horizon servers in an effort to establish web shells.

SocGholish Framework

A social engineering and payload delivery toolset

PetitPotam NTLM relay attack technique

An NTLM relay attack targeting Windows domain controllers and other Windows servers

Nobelium Advanced Spear-Phishing Campaign

A sophisticated phishing campaign delivering downloaders to Western organisations

Fortinet FortiOS Vulnerabilities Under Active Exploitation

Warning issued by US security agencies