Intelligence | Threatmate

2 days ago

Attackers Exploit Microsoft Device Code Authentication to Compromise M365 Accounts

The Download Threat actors, suspected to be Russian, are leveraging Microsoft's Device Code Authentication mechanism to gain unauthorized...

2 days ago

Hackers Exploit Authentication Bypass in Palo Alto Networks PAN-OS

The Download A critical vulnerability, identified as CVE-2025-0108, has been discovered in Palo Alto Networks' PAN-OS, the operating...

Feb 10

Critical Backdoor Vulnerability Found in Patient Monitors

The Download The Cybersecurity and Infrastructure Security Agency (CISA) and the U.S. Food and Drug Administration (FDA) have issued a...

Feb 10

Record Surge: 768 CVEs Exploited in 2024 Reflects 20% Increase in Cyber Threats

The Download In 2024, cyber threat actors exploited 768 Common Vulnerabilities and Exposures (CVEs), marking a 20% rise from the 639 CVEs...

Feb 6

ThreatMate Secures $3.2M Seed Round Led by Top Down Ventures to Redefine Attack Surface Management for MSPs

Dover, Delaware - Feb 6, 2025 - ThreatMate, the AI-powered cybersecurity startup revolutionizing attack surface management for Managed...

Feb 3

WantToCry Ransomware Exploits SMB Vulnerabilities to Target NAS Drives

#ransomware The Download The "WantToCry" ransomware group has been actively exploiting misconfigured Server Message Block (SMB) services...

Feb 3

Time Bandit: ChatGPT Jailbreak Exposes AI Vulnerabilities

The Download A recently discovered exploit, dubbed "Time Bandit," allows users to bypass ChatGPT's safety protocols by inducing temporal...

Jan 27

Critical Vulnerability in Cisco Meeting Management Demands Immediate Patching

The Download Cisco has released a patch for a critical vulnerability (CVE-2025-20156) in its Meeting Management software, which carries a...

Jan 27

Thousands of Fortinet Firewalls Remain Unpatched Amid Active Exploitation

The Download Despite the release of a critical security patch by Fortinet, approximately 48,457 Fortinet firewall devices remain...

Jan 20

Ongoing Google Attack Compromises Passwords and 2FA—Immediate Action Required

The Download A persistent cyberattack campaign is targeting Google account holders, successfully stealing both passwords and two-factor...

Jan 20

Over 4 Million Internet Hosts Exposed Due to Tunneling Protocol Vulnerabilities

The Download Recent research by Professor Mathy Vanhoef and PhD student Angelos Beitis from KU Leuven University, in collaboration with...

Jan 13

SonicWall Urges Immediate Patching of Critical SSL VPN Vulnerability

The Download SonicWall has identified a critical authentication bypass vulnerability, designated as CVE-2024-53704, affecting its...

Jan 13

Critical Windows LDAP Vulnerabilities Demand Immediate Attention

The Download Microsoft issued patches for two critical vulnerabilities in the Windows Lightweight Directory Access Protocol (LDAP) that...

Jan 7

Crypto Wallet Drainers Swipe Nearly $500 Million in 2024

The Download In 2024, cryptocurrency wallet drainers—a type of phishing tool designed to illicitly access and deplete digital...

Jan 7

New Mirai Variant Exploits Zero-Day Vulnerabilities in Industrial Routers

The Download A recent variant of the Mirai botnet has emerged, targeting industrial routers and smart home devices by exploiting zero-day...

Dec 30, 2024

Router Vuln Discovered: Exploits Allow Reverse Shell Access to Networks

The Download Security research firm VulnCheck discovered a critical vulnerability in Four-Faith routers that allows hackers to open...

Dec 30, 2024

Google Chrome 2FA Bypass Threat: What IT Teams Must Know

The Download A newly discovered attack bypasses two-factor authentication (2FA) protections in Google Chrome by exploiting weaknesses in...

Dec 23, 2024

Zero-Click Danger: Synology Urges Critical Updates to Shield Your Data

The Download Synology has patched several critical vulnerabilities in its NAS (Network Attached Storage) devices, including dangerous...