FBI says SafePay breached more than 600 organizations since 2024
U.S., German, and U.K. agencies say the gang guesses passwords, phishes, and exploits listed flaws.
8 stories, newest first · one card per story
U.S., German, and U.K. agencies say the gang guesses passwords, phishes, and exploits listed flaws.

Heap buffer overflow 'AnyPwn' in AnyDesk Linux 8.0.2 enables pre-approval remote code execution with root privileges, fixed in 8.0.3.

A public proof-of-concept targets a patched AnyDesk Linux 8.0.2 flaw that can run commands as root without authentication.

Researchers released AnyPwn, a working pre-auth root exploit for AnyDesk Linux before 8.0.3.

Huntress says attackers used Samsung MagicINFO CVE-2025-4632 on one Windows host to compile a Monero miner.
Huntress details attackers exploiting Samsung MagicINFO CVE-2025-4632 to install AnyDesk and compile an XMR cryptominer directly on the endpoint.

Attackers chained two PaperCut NG/MF zero-days for unauthenticated access, installing SimpleHelp and AnyDesk remote access tools on compromised servers.

An Akira affiliate rebooted a compromised host into Safe Mode to bypass EDR, but constrained memory crashed the encryptor before encryption completed.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views