Any public certification authority (CA) can issue a certificate for any website on the Internet to allow a webserver to […]
A next-generation Certificate Transparency log built on Cloudflare Workers Read More »
What are IABs? Initial Access Brokers (IABs) specialize in gaining unauthorized entry into computer systems and networks, then selling that
Initial Access Brokers Shift Tactics, Selling More for Less Read More »
Palo Alto Networks has revealed that it’s observing brute-force login attempts against PAN-OS GlobalProtect gateways, days after threat actors warned
Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways Read More »
Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a
SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps Read More »
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of
OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation Read More »
Welcome to this week’s edition of the Threat Source newsletter. If there’s one thing that threat actors love, it’s chaos.
Threat actors thrive in chaos Read More »
Cisco Talos has observed a widespread and ongoing financial theft SMS phishing (smishing) campaign since October 2024 that targets toll
Unraveling the U.S. toll road smishing scams Read More »
Hey there, I hope you’ve been doing well! 📺️ How Burp AI can elevate your pentesting So this is a pretty
Cybersecurity researchers have detailed a case of an incomplete patch for a previously addressed security flaw impacting the NVIDIA Container
Incomplete Patch in NVIDIA Toolkit Leaves CVE-2024-0132 Open to Container Escapes Read More »
