Search: “remote”

22,702 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 6627 Malware 4329 Ransomware 3314 Exploit / PoC 2890 Industry 1339 Threat actor 1055 Data breach 1027 Policy & legal 744 Phishing & fraud 673 Advisory 312 AI tools & infra 129 Research 119 AI safety & security 113 Tools 87

SeverityAll critical 10315 high 6739 medium 3773 low 1690 info 360

Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021

Apache Log4j 2 RCE CVE-2021-44228 is actively exploited via crafted JNDI lookups; Palo Alto Unit 42 urges upgrading to Log4j 2.17.1.

Unit 42 details CVE-2021-44228, an easily exploited remote code execution flaw in Apache Log4j 2 where attacker-supplied JNDI lookups in logged user input cause payload download and execution. Massive internet-wide scanning for unpatched systems has begun, with observed follow-on activity including information stealing, Cobalt Strike delivery, and coinmining. The recommended fix is Log4j 2.17.1, which also patches CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Widely used Java software including Apache Struts, Solr, Druid, Flink, ElasticSearch, and Spring Boot is affected.

Palo Alto Unit 42Aug 17, 12:20 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+3 CVEs

North Korea’s Fraudulent IT Employment Scheme: A Cybersecurity Threat

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Phishing & fraud

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 11, 19:24 UTC · Feb 11, 2025Vulnerability in the wildCVE-2025-21376 CVE-2025-21379 CVE-2025-21177+15 CVEs

Talos IR trends Q4 2024: Web shell usage and exploitation of public

Cisco TalosJan 30, 11:00 UTC · Jan 30, 2025Ransomware

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)

Help Net SecurityDec 18, 00:00 UTC · Dec 18, 2024Vulnerability in the wildCVE-2024-12356 CVE-2024-12686

Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes

Palo Alto Unit 42Jun 6, 01:14 UTC · Jun 6, 2024Exploit / PoC CVE-2017-9506 CVE-2017-12629 CVE-2019-2767+23 CVEs

Trusted relationship attacks

Kaspersky SecurelistMay 28, 09:32 UTC · May 28, 2024Vulnerability

BeyondTrust Remote Support 22.3 enhances service desk efficiency

Help Net SecurityNov 1, 00:00 UTC · Nov 1, 2022Tools

RemotePC mobile access allows users to access their remote computers from any iOS or Android device

Help Net SecurityOct 11, 00:00 UTC · Oct 11, 2022Industry

SpyDealer: Android Trojan Spying on More Than 40 Apps

Palo Alto Unit 42Jan 28, 20:20 UTC · Jan 28, 2022Malware

Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue

Security AffairsJan 13, 14:25 UTC · Jan 13, 2021Vulnerability in the wildCVE-2021-1647 CVE-2021-1648 CVE-2021-1665+10 CVEs

Organizations with remote workforces need new security solutions

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2020Industry

Trust in Remote Working Tools Declines as Need for Security Increases

Infosecurity MagazineOct 21, 16:00 UTC · Oct 21, 2020Vulnerability

Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking

The Hacker NewsJul 8, 07:01 UTC · Jul 8, 2020Vulnerability CVE-2020-9497 CVE-2020-9498

CyberArk Alero's expanded capabilities allow remote employees secure access to critical systems

Help Net SecurityMar 13, 00:00 UTC · Mar 13, 2020Industry

Secure remote browsing: A different approach to thwart ever-changing threats

Help Net SecurityOct 25, 00:00 UTC · Oct 25, 2017Ransomware

Explained — How Intel AMT Vulnerability Allows to Hack Computers Remotely

The Hacker NewsMay 12, 08:45 UTC · May 12, 2017Vulnerability CVE-2017-5689

Animas OneTouch Ping Insulin Pumps could be remotely hacked

Security AffairsOct 5, 12:46 UTC · Oct 5, 2016Exploit / PoC CVE-2016-5084 CVE-2016-5085 CVE-2016-5086+1 CVEs

Microsoft Confirms Remote Desktop Services Might Stop Working Following Sept. 2026 Security Update

Microsoft's September 2026 Patch Tuesday updates (KB5124008) can break Remote Desktop Services, causing RDP failures and freezes across Windows clients and servers.

Microsoft confirmed its September 2026 security updates, including KB5124008 for Windows 11 24H2/25H2, introduced a reliability regression where RDP connections fail after several minutes and servers hang at the 'Please wait for the Remote Desktop Configuration' screen. MMC, RDS Licensing Diagnoser, File Explorer, and the Windows Update settings page may also stop responding. The issue affects Windows 10/11 clients and Windows Server 2012 through 2025; Microsoft marked it Mitigated on September 11 and is developing a permanent fix, with VM restart offered as a temporary workaround.

Cyber Security NewsSep 14, 10:43 UTC · 2d agoAdvisory

Threat Brief: OWASSRF Vulnerability Exploitation

Unit 42 details active exploitation of Exchange SSRF flaws CVE-2022-41080/CVE-2022-41082 via the OWASSRF method, deploying the SilverArrow PowerShell backdoor.

Unit 42 documents OWASSRF, an exploit chain combining CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution on Microsoft Exchange via Outlook Web Access, bypassing Microsoft's ProxyNotShell mitigations. Active exploitation was observed in late November and early December 2022, affecting at least eight organizations. Attackers authenticated to Exchange, then executed a PowerShell backdoor tracked as SilverArrow to create admin accounts, install AnyDesk, tunnel RDP via PuTTY Link, and dump LSASS memory for credential theft. Exploitation is isolated rather than mass-scale because authentication is required.

Palo Alto Unit 42Aug 17, 10:58 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2022-41080 CVE-2022-41082 CVE-2022-410401