CYBER ATTACK

ZerOwl — Find Vulnerabilities Before Hackers Do
Splunk RCE Vulnerability Allows Attackers to Execute Arbitrary Shell Commands

Splunk RCE Vulnerability Allows Attackers to Execute Arbitrary Shell Commands

CYBER ATTACKZerowl

Splunk RCE Vulnerability A serious security advisory has been sent out to let users know about a high-severity flaw that affects both Enterprise and Cloud.

Paloalto Cortex XDR Broker Vulnerability Attackers to Obtain and Modify Sensitive Information

Paloalto Cortex XDR Broker Vulnerability Attackers to Obtain and Modify Sensitive Information

CYBER ATTACKZerowl

Vulnerability in Paloalto Cortex XDR Broker A security warning has been sent out about a new flaw that affects the Cortex XDR Broker Virtual Machine (VM).

Hackers Exploit Remote Management Tools to Gain Initial Access to Corporate Networks

Hackers Exploit Remote Management Tools to Gain Initial Access to Corporate Networks

CYBER ATTACKZerowl

Threat actors are using legitimate Remote Monitoring and Management (RMM) tools more and more to get into corporate networks and stay there for a long.

Ericsson US Discloses Data Breach – Hackers Stolen Employees and Customers Data

Ericsson US Discloses Data Breach – Hackers Stolen Employees and Customers Data

CYBER ATTACKZerowl

The Ericsson Data Breach A Swedish telecommunications multinational's U.S. subsidiary has revealed a data breach that put the personal information of.

Cisco IOS XR Software Vulnerability Allow Attacker to Execute Commands as Root

Cisco IOS XR Software Vulnerability Allow Attacker to Execute Commands as Root

CYBER ATTACKZerowl

cisco-ios-xr-software-vulnerability Cisco has sent out a high-severity security advisory to warn businesses about two serious privilege-escalation flaws.

BeatBanker Malware Targets Crypto Wallets With Audio-Based Persistence

BeatBanker Malware Targets Crypto Wallets With Audio-Based Persistence

CYBER ATTACKZerowl

Discover how The BeatBanker malware campaign has been found recently. It uses a unique method to stay on Android devices. This malware mostly affects.

SolarWinds Web Help Desk Deserialization Vulnerability Enables Command Execution

SolarWinds Web Help Desk Deserialization Vulnerability Enables Command Execution

CYBER ATTACKZerowl

The SolarWinds Web Help Desk has a problem with deserialization This article explores solarwinds vulnerability ajaxproxy. . Cybersecurity experts have.

Iran‑Linked Actors Forge Deeper Ties With Cybercriminal Networks

Iran‑Linked Actors Forge Deeper Ties With Cybercriminal Networks

CYBER ATTACKZerowl

Discover how Iranian state-sponsored hackers are becoming more involved in the criminal world, making their connections with underground cybercrime groups.

Hackers Leveraging Cloudflare Anti-Bot Features to Steal Microsoft 365 Credentials

Hackers Leveraging Cloudflare Anti-Bot Features to Steal Microsoft 365 Credentials

CYBER ATTACKZerowl

A complex Microsoft 365 credential harvesting campaign that uses Cloudflare's own security features to avoid detection and steal user login information.

GitLab Security Update – Patch for XSS and API DoS Vulnerabilities

GitLab Security Update – Patch for XSS and API DoS Vulnerabilities

CYBER ATTACKZerowl

GitLab Security Update Fixes XSS and API DoS Holes GitLab has put out important security updates for its Community Edition (CE) and Enterprise Edition.

Critical Palo Alto Networks Cortex XDR Broker Vulnerability Allows Attackers to Access and Modify Sensitive Data

Critical Palo Alto Networks Cortex XDR Broker Vulnerability Allows Attackers to Access and Modify Sensitive Data

CYBER ATTACKZerowl

Palo Alto Networks has put out a security advisory to let customers know about a new flaw that affects its Cortex XDR Broker Virtual Machine (VM) This.

ClickFix Social Engineering Delivers MacSync Infostealer On Macs

ClickFix Social Engineering Delivers MacSync Infostealer On Macs

CYBER ATTACKZerowl

The ClickFix social engineering method has become a popular way to spread malware in the last few months, especially among macOS users This article.

Chrome Security Update – Patch for 29 Vulnerabilities that Allow Remote Code Execution

Chrome Security Update – Patch for 29 Vulnerabilities that Allow Remote Code Execution

CYBER ATTACKZerowl

Patch for 29 Chrome security holes Google has officially released Chrome version 146 to the stable channel This article explores patch 29 chrome. . This.

CastleRAT Exploits Deno Runtime To Bypass Enterprise Security

CastleRAT Exploits Deno Runtime To Bypass Enterprise Security

CYBER ATTACKZerowl

ThreatDown Research recently found the first documented use of the Deno JavaScript runtime in a CastleRAT attack, which is a big deal in the world of.

UNC6426 Turns NPM Supply‑Chain Breach Into Full AWS Admin Access

UNC6426 Turns NPM Supply‑Chain Breach Into Full AWS Admin Access

CYBER ATTACKZerowl

In 2025, Mandiant found out that the threat group UNC6426 had launched a complex attack that used a hacked NPM package to take complete control of a.

Stryker Corporation Hit by Cyberattack as Hackers Claim System Breach and Device Wipe

Stryker Corporation Hit by Cyberattack as Hackers Claim System Breach and Device Wipe

CYBER ATTACKZerowl

On March 11, 2026, Stryker, a global medical technology company, was hit by a major cyberattack that forced its entire IT infrastructure to shut down This.

Google Completes Acquisition of Wiz in Historic $32 Billion Deal

Google Completes Acquisition of Wiz in Historic $32 Billion Deal

CYBER ATTACKZerowl

Google has officially closed its $32 billion all-cash purchase of Wiz, an Israeli cloud and AI security platform This article explores acquisition.

Google Chrome Security Update Fixes 29 Vulnerabilities, Including Remote Code Execution Flaws

Google Chrome Security Update Fixes 29 Vulnerabilities, Including Remote Code Execution Flaws

CYBER ATTACKZerowl

Discover how Google has released an important security update for its Chrome browser that fixes 29 security holes that could let hackers run harmful code.

Microsoft Releases Cumulative Updates for Windows 11 25H2/24H2 and 23H2

Microsoft Releases Cumulative Updates for Windows 11 25H2/24H2 and 23H2

CYBER ATTACKZerowl

Microsoft's Cumulative Updates Microsoft has released its latest round of cumulative updates for Windows 11 users in March 2026 This article explores.

Instagram Down: New Outage Causes Widespread Disruption in Posting and DM Functionality

Instagram Down: New Outage Causes Widespread Disruption in Posting and DM Functionality

CYBER ATTACKZerowl

Discover how Instagram is down Today, Meta's Instagram platform has had a major service outage that has left thousands of users around the world unable to.

How to Scale Early Threat Detection in Your SOC without Extra Staff

How to Scale Early Threat Detection in Your SOC without Extra Staff

CYBER ATTACKZerowl

Scaling Up Early Threat Detection in Your SOC Early detection isn't just a good idea; it's the main thing that keeps a small incident from turning into a.

Gogs Vulnerability Lets Attackers Quietly Overwrite Big File Storage Objects

Gogs Vulnerability Lets Attackers Quietly Overwrite Big File Storage Objects

CYBER ATTACKZerowl

Gogs Vulnerability Overwrites Large File Storage Objects A serious security hole has been found in a well-known open-source Git service that people host.

Vietnam-Based Fraud Network Powers Large-Scale Account Signup Abuse

Vietnam-Based Fraud Network Powers Large-Scale Account Signup Abuse

CYBER ATTACKZerowl

Okta Threat Intelligence and researchers from the University of Cyprus have found that a lot of fake account registrations are coming from a big.

Red Alert App Trojan Targets Israeli Users, Steals Sensitive Data Through SMS

Red Alert App Trojan Targets Israeli Users, Steals Sensitive Data Through SMS

CYBER ATTACKZerowl

A recent targeted cyberattack is using the trusted Red Alert rocket warning app to spread spyware to Israeli users. On March 1, 2026, the Acronis Threat.

Microsoft .NET 0-Day Vulnerability Enables Denial-of-Service Attacks

Microsoft .NET 0-Day Vulnerability Enables Denial-of-Service Attacks

CYBER ATTACKZerowl

Microsoft .NET 0-Day Flaw A new .NET Framework security flaw, CVE-2026-26127, has been made public, and an emergency update has been released to fix it.

Instagram Suffers Global Outage, Users Unable to Post or Send Messages

Instagram Suffers Global Outage, Users Unable to Post or Send Messages

CYBER ATTACKZerowl

On March 11, 2026, Instagram went down all over the world, making it impossible for thousands of users to use basic features like posting, loading feeds.

Critical Microsoft Office Vulnerability Enables Remote Code Execution Attacks

Critical Microsoft Office Vulnerability Enables Remote Code Execution Attacks

CYBER ATTACKZerowl

Discover how Microsoft has revealed a serious security hole in Microsoft Office that could let hackers run harmful code on affected computers. The flaw.

BlackSanta EDR Killer Malware Attacks HR Workflows in a Multi-Layered Way

BlackSanta EDR Killer Malware Attacks HR Workflows in a Multi-Layered Way

CYBER ATTACKZerowl

Threat actors are now targeting human resources (HR) departments with a complicated malware attack in a scary new campaign. BlackSanta is the name of the.

Top 5 this week

Page 45 of 73