news
Security Leftovers
-
Scoop News Group ☛ Cisco customers hit by fresh wave of zero-day attacks from China-linked APT
Cisco has yet to release a patch for the actively exploited vulnerability, and attacks have been underway since at least late November.
-
Security Week ☛ China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear
The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.
-
Scoop News Group ☛ Policymakers grapple with fallout from Chinese AI-enabled hack
Some lawmakers and executives say the era of AI-hacking has arrived, while other experts are pointing out the tools of today still fall short in important ways.
-
Security Week ☛ France Probes ‘Foreign Interference’ After Remote Control Malware Found on Passenger Ferry
France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry
-
Security Week ☛ SonicWall Patches Exploited SMA 1000 Zero-Day
The medium-severity flaw has been exploited in combination with a critical bug for remote code execution.
-
Security Week ☛ 113,000 Impacted by Data Breach at Virginia Mental Health Authority
Threat actors stole names, Social Security numbers, and financial and health information, and deployed ransomware on RBHA’s systems.
-
Security Week ☛ CISA Warns of Exploited Flaw in Asus Update Tool
Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack.
> -
Security Week ☛ HPE Patches Critical Flaw in IT Infrastructure Management Software
Tracked as CVE-2025-37164, the critical flaw could allow unauthenticated, remote attackers to execute arbitrary code.