60
March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V
60
Iran-Linked Hackers Use Fake LinkedIn Job Offers to Deploy NodeRabbit and PollCat RATs
Iran-linked Mirage Kitten targets software engineers with fake LinkedIn recruiter coding tests deploying new NodeRabbit and PollCat RATs.
Kaspersky researchers link the campaign to Mirage Kitten (also tracked as UNC1549, Smoke Sandstorm, Nimbus Manticore), with victims in aviation, aerospace and fintech in Egypt, Ethiopia and Afghanistan. Trojanized npm dependencies (colorized_terminal, pretty-log) bundled in coding-challenge archives launch the Node.js implants across Windows, Linux and macOS. NodeRabbit uses AES-256-GCM-encrypted C2 via Azure, and its third variant persists through a fake GitHub Copilot Helper VS Code extension plus Git post-merge/post-checkout hooks. PollCat is an obfuscated JavaScript RAT that registers with C2 before OTP authentication and inventories tools from 24 security vendors.
72
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)
60
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero
60
Microsoft Issues Patches for 121 Flaws, Including Zero
60
60
Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)
60
Alert: Microsoft Releases Patch Updates for 5 New Zero
60
60
Flaws in CyberPower solutions expose data centers to hacking
60
60
60
Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
Week in review: Medusa ransomware hit 500+ orgs per CISA, millions of Azure tenant records allegedly stolen, SafePal and French tax authority breaches disclosed.
Help Net Security's weekly roundup covers the FBI, CISA, and HHS joint advisory update reporting Medusa ransomware has breached more than 500 organizations since June 2021, and threat actor TheHatman's claim of millions of employee records stolen from Azure tenants of Fortune 500 firms including McDonald's, Vodafone, Kyndryl, and Tata Consultancy Services, per Hudson Rock. It also covers the SafePal breach affecting 39,798 customers, France's DGFiP breach exposing data on 678,000 individuals, and UT San delaying its fall semester after a cyberattack. Security items include critical unauthenticated GitLab flaw CVE-2026-19478, an actively exploited patched macOS Screen Sharing flaw deploying a cryptominer, US charges against 17 Mabna Institute Iranian hackers over 31TB of stolen academic data, and Google Mandiant's AI agents finding 100+ high-severity vulnerabilities.
42
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
60
60
Microsoft Patch Tuesday for Sept. 2021 — Snort rules and prominent vulnerabilities
60
60
60
60
Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zero
60
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
60
Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities
60
60
60
60
60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]
60
Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue
60
60
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
60
Microsoft Patch Tuesday for April 2021 — Snort rules and prominent vulnerabilities
60
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens
60
60
60
60
Week in review: 18 free Microsoft Azure cybersecurity resources, K8 vulnerability allows RCE
60
60
Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
60