DPRK
TRENDING TOPICS NOV 24, 2025 Update: DPRK Expands Contagious Interview Operation With Full Fake Job Platform Targeting U.S. AI Talent Researchers have uncovered a highly polished fake recruitment platform built as part of a new variant of the DPRK-linked Contagious Interview operation. Unlike earlier lures that relied on simple
SmudgedSerpent
TRENDING TOPICS NOV 05, 2025 SmudgedSerpent Hackers Target U.S. Policy Experts with Iranian-Themed Phishing Lures A newly identified threat cluster dubbed UNK_SmudgedSerpent has launched a series of espionage-driven phishing attacks against U.S.-based academics and foreign policy experts focusing on Iran. According to Proofpoint researchers, the campaign
UNC6229
CVE-2025-6950 Critical Moxa Network Appliances HARDCODED SECRET KEY TOKEN FORGERY Moxa network appliances use a hard-coded secret key to sign JSON Web Tokens (JWT), allowing attackers to forge valid authentication tokens and gain full administrative control over affected devices without any valid credentials. Mitigation: Update firmware immediately, rotate all JWT
UNC6395
TRENDING TOPICS SEPT 15, 2025 Update: FBI Warns of Salesforce Data Theft by UNC6040 and UNC6395 The FBI has issued a FLASH advisory warning that two active threat clusters, UNC6040 and UNC6395, are breaching Salesforce environments to steal sensitive data and extort victims. UNC6040, first reported by Mandiant in June
PagerDuty
TRENDING TOPICS SEPT 04, 2025 Update: PagerDuty Drawn into Salesloft OAuth Fallout PagerDuty has confirmed that it was impacted by the ongoing Salesloft Drift OAuth breach, which has already affected several high-profile companies. The compromise was traced back to August 20, 2025, when Salesloft first alerted PagerDuty to a security
UAC-0057
CVE-2025-20265 Critical Cisco Secure Firewall Management Center COMMAND INJECTION Critical vulnerability in the RADIUS subsystem allows unauthenticated remote attackers to inject arbitrary shell commands during authentication, enabling high-privilege code execution. Exploitable only if FMC is configured to use RADIUS for web or SSH management. Mitigation: Apply Cisco patches immediately or