mitre-t1110
55 articles with this tag
CRITICAL
HIGH
HIGH
MEDIUM
CRITICAL
MEDIUM
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Attackers exploit SonicWall VPN vulnerability to bypass MFA
Hackers bypass SonicWall VPN MFA due to incomplete patching
WantToCry ransomware remotely encrypts files
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
Siemens SIPROTEC 5
Mini Shai-Hulud Hits TanStack npm Packages
Official CheckMarx Jenkins package compromised with infostealer
Chinese-linked Salt Typhoon suspected in Italy's Sistemi Informativi breach
1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom
TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack
Three Arrested for Hacking Over 610,000 Roblox Accounts
New Checkmarx supply-chain breach affects KICS analysis tool
Mythos: An AI tool too powerful for public release
Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet
Horner Automation Cscape and XL4, XL7 PLC
Researchers Spot Surge in Brute-Force Attacks from Middle East
Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
Guardarian Users Targeted With Malicious Strapi NPM Packages
npm-sentinel: 21 malicious npm packages in 24h including LLM API MITM, encrypted skill backdoors, and Redis weaponization via postinstall
Defending Your Software Supply Chain: What Every Engineering Team Should Do Now
AI Interview startup, Mercor Al breached via LiteLLM supply chain attack. Lapsus$ claims 4TB data breached including 211 GB candidate records and 3TB of video interviews
Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne
From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI
New Malware Highlights Increased Systematic Targeting of Network Infrastructure
New Malware Highlights Increased Systematic Targeting of Network Infrastructure
Accertify’s Attack State targets credential stuffing and ATO attacks
Authentication rate-limit bypass permits to brute force admin logins
Authentication Lockout Bypass via Race Condition
UAT-9244 targets South American telecommunication providers with three new malware implants
How a Brute Force Attack Unmasked a Ransomware Infrastructure Network
CyberStrikeAI tool adopted by hackers for AI-powered attacks
OpenClaw Vulnerability Allowed Websites to Hijack AI Agents
ClawJacked Bug Enables Covert AI Agent Hijacking
ClawJacked attack let malicious websites hijack OpenClaw to steal data
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket
Your personal OpenClaw agent may also be taking orders from malicious websites
Chargemap chargemap.com
Hacker knackt 600 Firewalls in einem Monat – mit KI
Take control: Locking down common endpoint vulnerabilities
Russian group uses AI to exploit weakly-protected Fortinet firewalls, says Amazon
600+ FortiGate Devices Hacked by AI-Armed Amateur
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Unit 42: Nearly two-thirds of breaches now start with identity abuse
Medusa Ransomware 2025: RMM Abuse in Ransomware Campaigns
SSHStalker botnet preys on legacy Linux & cloud hosts
SSHStalker botnet uses old-school IRC for large-scale Linux attacks
SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning
World Leaks Ransomware Group Adds Stealthy, Custom Malware ‘RustyRocket’ to Attacks
SSHStalker botnet brute-forces its way onto 7,000 Linux machines
New Linux botnet SSHStalker uses old-school IRC for C2 comms
Password guessing without AI: How attackers build targeted wordlists
Men charged in FanDuel scheme fueled by thousands of stolen identities