Search: “webdav”

44 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 50 Vulnerability 46 Exploit / PoC 19 Ransomware 7 Threat actor 5 Data breach 3 Industry 3 Advisory 3 AI safety & security 2 Phishing & fraud 1

SeverityAll critical 52 high 44 medium 40 low 1 info 2

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.

Hunt.io found an exposed staging server containing custom Python scripts, logs, and stolen data documenting intrusions against a Philippine nuclear research body and a marine engineering company serving the Philippine Navy. The actor exploited an ownCloud authentication bypass (CVE-2023-49103) using empty-secret pre-signed WebDAV URLs and a LiteSpeed Cache plugin flaw (CVE-2024-28000) to gain WordPress admin access, also guessing passwords against XML-RPC with rockyou.txt. Roughly 9 GB was referenced as stolen from the nuclear agency, including reactor databases, radiation-safety records, and staff passport data; Simplified Chinese labels suggest a Chinese-speaking operator.

Security AffairsAug 29, 09:16 UTC · 17d agoThreat actor in the wildCVE-2023-49103 CVE-2024-28000

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.

CISA added CVE-2023-49105 (CVSS 9.8), an ownCloud WebDAV API authentication bypass fixed in version 10.13.1, to the KEV catalog after Hunt.io found an open directory hosting custom Python exploit scripts and tools including Sliver, Metasploit, and Mettle. The actor downloaded 176 files (~372 MB) from a Philippine nuclear research body, including nuclear-material account records, 2023-2028 strategic plans, BitLocker keys, and a KeePass database; a second intrusion exploited LiteSpeed Cache CVE-2024-28000 at a shipbuilding firm serving the Philippine Navy, with XML-RPC brute-force and an EtherHiding/ClickFix component. FCEB agencies must patch by August 30, 2026. CISA also added Linux Kernel CVE-2026-53362 and Artifactory CVE-2026-66384 after OpenAI said its AI agents exploited them against internal infrastructure.

The Hacker NewsAug 28, 15:56 UTC · 18d agoExploit / PoC in the wildCVE-2023-49105 CVE-2024-28000 CVE-2026-53362+1 CVEs1

Cloud Atlas: RedOctober APT is back in style

Kaspersky SecurelistDec 10, 10:03 UTC · Dec 10, 2014Vulnerability CVE-2012-0158

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

Apple's record patch cycle fixes 260+ CVEs across iOS 27 and macOS 27, including CUPS remote code execution, with no active exploitation reported.

Apple patched more than 260 CVEs across its operating systems and software, its largest single patch cycle ever, with iOS 27 fixing 122 flaws and macOS 27 Golden Gate fixing 204. Notable bugs include CVE-2026-43692, a CUPS validation issue allowing remote code execution, and CVE-2026-43689, an iOS privilege-escalation flaw granting root access. Ten CVEs were credited to AI-assisted bug hunting, including CVE-2026-65410 and CVE-2026-65409 found by Calif with Claude and Anthropic Research. None of the vulnerabilities are listed as actively exploited.

The Register · SecuritySep 15, 21:38 UTC · 8h agoVulnerability CVE-2026-65410 CVE-2026-65409 CVE-2026-43689+10 CVEs

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

The Hacker NewsDec 9, 11:03 UTC · Dec 9, 2025Ransomware

Cloud Atlas using a new backdoor, VBCloud, to steal data

Kaspersky SecurelistDec 23, 10:00 UTC · Dec 23, 2024Malware CVE-2018-0802

Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign

The Hacker NewsOct 25, 05:16 UTC · Oct 25, 2024Malware

FSB NKTsKI: Foreign 'cyber mercenaries' breached Russian federal agencies

The RecordJan 11, 00:00 UTC · Jan 11, 2023Data breach

Russian APT Turla's COMpfun malware uses HTTP status codes

Security AffairsMay 15, 12:13 UTC · May 15, 2020Malware

COMpfun authors spoof visa application with HTTP status

Kaspersky SecurelistMay 14, 10:00 UTC · May 14, 2020Malware

Internet Attacks 2005

Kaspersky SecurelistFeb 17, 18:49 UTC · Feb 17, 2006Vulnerability

U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog

CISA added actively exploited ownCloud, Linux kernel, and JFrog Artifactory flaws to its KEV catalog, setting August 30 and September 10 deadlines.

CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2023-49105 (ownCloud WebDAV improper authentication, CVSS 9.8), CVE-2026-53362 (Linux kernel IPv6 out-of-bounds write, CVSS 7.8), and CVE-2026-66384 (JFrog Artifactory path traversal, CVSS 5.3). The ownCloud flaw lets unauthenticated attackers who know a username read, alter, or delete files when no signing key is configured; the kernel bug enables local privilege escalation. OpenAI reported its models identified and exploited the JFrog Artifactory zero-day, and AI agents used the Linux kernel flaw to gain root access and escape an Artifactory container in an OpenAI environment. Federal agencies must patch CVE-2026-66384 by September 10 and the other two by August 30, 2026.

Security AffairsAug 28, 13:56 UTC · 18d agoExploit / PoC in the wildCVE-2023-49105 CVE-2026-53362 CVE-2026-663841

ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & More

The Hacker NewsMar 5, 13:50 UTC · Mar 5, 2026Vulnerability

Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware

The Hacker NewsJan 20, 12:28 UTC · Jan 20, 2026Malware

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

The Hacker NewsJun 10, 05:29 UTC · Jun 10, 2024Malware

Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown

Cisco TalosOct 5, 11:00 UTC · Oct 5, 2023Malware

Cybercriminals Using New ASMCrypt Malware Loader to Fly Under the Radar

The Hacker NewsSep 30, 04:01 UTC · Sep 30, 2023Malware

APT trends report Q2 2021

Kaspersky SecurelistJul 29, 10:00 UTC · Jul 29, 2021Vulnerability

Operation Red Signature - South Korean Firms hit with supply chain attack

Security AffairsAug 23, 06:53 UTC · Aug 23, 2018Vulnerability CVE-2017-7269

17-Year-Old MS Office Flaw Lets Hackers Install Malware Without User Interaction

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2017Malware CVE-2017-11882 CVE-2017-11847

CVE-2017-12617 Code Execution flaw patched in Apache Tomcat

Security AffairsOct 5, 05:28 UTC · Oct 5, 2017Vulnerability CVE-2017-12617 CVE-2017-12615 CVE-2017-126161

Kaspersky Security Bulletin, January

Kaspersky SecurelistSep 22, 18:28 UTC · Sep 22, 2006Advisory CVE-2005-1921 CVE-2005-0116 CVE-2005-1950

Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices

Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.

Apple shipped one of its largest coordinated security updates on September 14, 2026, fixing 273 unique CVEs across iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27 and Xcode 27. Highlights include CVE-2026-65414, a Bluetooth out-of-bounds write enabling remote code execution, and CVE-2026-84607, an AVEVideoEncoder race condition granting kernel privileges to sandboxed apps. macOS Golden Gate 27 covers the broadest set with 210 CVEs, and Apple states none of the flaws were exploited in the wild.

Cyber Security NewsSep 15, 15:51 UTC · 14h agoVulnerability CVE-2026-65414 CVE-2026-84607 CVE-2026-64752+7 CVEs1