ZerOwl

More than 1,800 Windows servers are compromised by BADIIS malware in an SEO poisoning attack.

Using BADIIS malware to carry out a massive SEO poisoning campaign, the Chinese-speaking group REF4033, also known as UAT-8099, has compromised over 1,800.

More than 1,800 Windows servers are compromised by BADIIS malware in an SEO poisoning attack.

CYBER ATTACKFeb 13, 2026

Using BADIIS malware to carry out a massive SEO poisoning campaign, the Chinese-speaking group REF4033, also known as UAT-8099, has compromised over 1,800.

VMware vSphere Targeted by Rogue VM Linked to Muddled Libra Attack Group

CYBER ATTACKZerowl

Arogue virtual machines (VMs) were a key component of the cybercrime group Muddled Libra's (also known as Scattered Spider or UNC3944) attack on VMware.

VMware vSphere Targeted by Rogue VM Linked to Muddled Libra Attack Group

CYBER ATTACKFeb 13, 2026

Arogue virtual machines (VMs) were a key component of the cybercrime group Muddled Libra's (also known as Scattered Spider or UNC3944) attack on VMware.

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

CYBERSECURITYZerowl

According to watchTowr, threat actors have begun to take advantage of a recently discovered serious security vulnerability affecting BeyondTrust Remote.

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

CYBERSECURITYFeb 13, 2026

According to watchTowr, threat actors have begun to take advantage of a recently discovered serious security vulnerability affecting BeyondTrust Remote.

Patch Immediately: BeyondTrust Remote Code Execution Flaw Exploited in the Wild

CYBER ATTACKZerowl

BeyondTrust has issued urgent security updates for a critical remote code execution (RCE) vulnerability plaguing its Remote Support (RS) and Privileged.

Patch Immediately: BeyondTrust Remote Code Execution Flaw Exploited in the Wild

CYBER ATTACKFeb 13, 2026

BeyondTrust has issued urgent security updates for a critical remote code execution (RCE) vulnerability plaguing its Remote Support (RS) and Privileged.

Notepad++ Code Execution Flaw Exploited in the Wild, CISA Issues Alert

CYBER ATTACKZerowl

A critical flaw in the popular Notepad++ text editor has been added to the U.S This article explores vulnerability wingup updater. . Cybersecurity and.

Notepad++ Code Execution Flaw Exploited in the Wild, CISA Issues Alert

CYBER ATTACKFeb 13, 2026

A critical flaw in the popular Notepad++ text editor has been added to the U.S This article explores vulnerability wingup updater. . Cybersecurity and.

Critical Zimbra Vulnerabilities Fixed: XSS, XXE, and LDAP Injection Risks Mitigated

CYBER ATTACKZerowl

Zimbra has released version 10.1.16, a crucial security update that fixes several high-severity flaws in its collaboration suite that could leave user.

Critical Zimbra Vulnerabilities Fixed: XSS, XXE, and LDAP Injection Risks Mitigated

CYBER ATTACKFeb 13, 2026

Zimbra has released version 10.1.16, a crucial security update that fixes several high-severity flaws in its collaboration suite that could leave user.

800,000 sites are vulnerable to remote code execution due to a critical WordPress backup plugin flaw.

CYBER ATTACKZerowl

Over 800,000 WordPress websites are vulnerable to unauthenticated remote code execution due to a serious flaw in the WPvivid Backup plugin This article.

800,000 sites are vulnerable to remote code execution due to a critical WordPress backup plugin flaw.

CYBER ATTACKFeb 13, 2026

Over 800,000 WordPress websites are vulnerable to unauthenticated remote code execution due to a serious flaw in the WPvivid Backup plugin This article.

Critical Vulnerability in next-mdx-remote Enables Arbitrary Code Execution in React SSR

CYBER ATTACKZerowl

When processing untrusted input, servers are vulnerable to arbitrary code execution due to a critical flaw in next-mdx-remote, a popular TypeScript.

Critical Vulnerability in next-mdx-remote Enables Arbitrary Code Execution in React SSR

CYBER ATTACKFeb 13, 2026

When processing untrusted input, servers are vulnerable to arbitrary code execution due to a critical flaw in next-mdx-remote, a popular TypeScript.

CISA Warns of Notepad++ Code Execution Vulnerability Exploited in Attacks

CYBER ATTACKZerowl

Notepad++ Code Execution Vulnerability CISA has identified active exploitation of a critical code execution flaw in Notepad++, a popular open-source text.

CISA Warns of Notepad++ Code Execution Vulnerability Exploited in Attacks

CYBER ATTACKFeb 13, 2026

Notepad++ Code Execution Vulnerability CISA has identified active exploitation of a critical code execution flaw in Notepad++, a popular open-source text.

CISA Alerts Users to an Actively Exploited SQL Injection Vulnerability in Microsoft Configuration Manager

CYBER ATTACKZerowl

A critical SQL injection vulnerability in Microsoft Configuration Manager has been added to the U.S This article explores vulnerability microsoft.

CISA Alerts Users to an Actively Exploited SQL Injection Vulnerability in Microsoft Configuration Manager

CYBER ATTACKFeb 13, 2026

A critical SQL injection vulnerability in Microsoft Configuration Manager has been added to the U.S This article explores vulnerability microsoft.

Top 5 this week

Your Next Breach Will Look Like Business as Usual

DATA BREACHZerowl

Your Next Breach Will Look Like Business as Usual

Ransomware Groups Increasingly Turn to EDR Killers Outside Vulnerable Driver Tactics

CYBER ATTACKZerowl

Ransomware Groups Increasingly Turn to EDR Killers Outside Vulnerable Driver Tactics

ProSpy Spyware Spread Through Fake Messaging Apps In Middle East Campaign

CYBER ATTACKZerowl

ProSpy Spyware Spread Through Fake Messaging Apps In Middle East Campaign

Malicious OpenVSX Extension Delivers GlassWorm To VS Code, Cursor, and Windsurf Users

CYBER ATTACKZerowl

Malicious OpenVSX Extension Delivers GlassWorm To VS Code, Cursor, and Windsurf Users

Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

CYBERSECURITYZerowl

LATEST

More than 1,800 Windows servers are compromised by BADIIS malware in an SEO poisoning attack.

More than 1,800 Windows servers are compromised by BADIIS malware in an SEO poisoning attack.

VMware vSphere Targeted by Rogue VM Linked to Muddled Libra Attack Group

VMware vSphere Targeted by Rogue VM Linked to Muddled Libra Attack Group

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

Patch Immediately: BeyondTrust Remote Code Execution Flaw Exploited in the Wild

Patch Immediately: BeyondTrust Remote Code Execution Flaw Exploited in the Wild

Notepad++ Code Execution Flaw Exploited in the Wild, CISA Issues Alert

Notepad++ Code Execution Flaw Exploited in the Wild, CISA Issues Alert

Critical Zimbra Vulnerabilities Fixed: XSS, XXE, and LDAP Injection Risks Mitigated

Critical Zimbra Vulnerabilities Fixed: XSS, XXE, and LDAP Injection Risks Mitigated

800,000 sites are vulnerable to remote code execution due to a critical WordPress backup plugin flaw.

800,000 sites are vulnerable to remote code execution due to a critical WordPress backup plugin flaw.

Critical Vulnerability in next-mdx-remote Enables Arbitrary Code Execution in React SSR

Critical Vulnerability in next-mdx-remote Enables Arbitrary Code Execution in React SSR

CISA Warns of Notepad++ Code Execution Vulnerability Exploited in Attacks

CISA Warns of Notepad++ Code Execution Vulnerability Exploited in Attacks

CISA Alerts Users to an Actively Exploited SQL Injection Vulnerability in Microsoft Configuration Manager

CISA Alerts Users to an Actively Exploited SQL Injection Vulnerability in Microsoft Configuration Manager

Top 5 this week

Your Next Breach Will Look Like Business as Usual

Your Next Breach Will Look Like Business as Usual

Ransomware Groups Increasingly Turn to EDR Killers Outside Vulnerable Driver Tactics

Ransomware Groups Increasingly Turn to EDR Killers Outside Vulnerable Driver Tactics

ProSpy Spyware Spread Through Fake Messaging Apps In Middle East Campaign

ProSpy Spyware Spread Through Fake Messaging Apps In Middle East Campaign

Malicious OpenVSX Extension Delivers GlassWorm To VS Code, Cursor, and Windsurf Users

Malicious OpenVSX Extension Delivers GlassWorm To VS Code, Cursor, and Windsurf Users

Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

Industrial Controllers Still Vulnerable As Conflicts Move to Cyber