mitre-t1110
94 articles with this tag
MEDIUM
MEDIUM
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
CRITICAL
MEDIUM
MEDIUM
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
LOW
CRITICAL
HIGH
HIGH
MEDIUM
CRITICAL
MEDIUM
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
HIGH
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
New TuxBot v3 Evolution IoT botnet framework shows signs of AI development
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices
County Government Reportedly Paid $1 Million to Cyber Extortion Group
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
US government agency pays $1 million to data extortion group Kairos
[webapps] KNX visualisering - Broken Access Control
Rússar grunaðir um stærstu netárás í sögu Bretlands
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
Russian Initial Access Broker Behind FortiBleed Campaign
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
Fortinet Responds to FortiBleed Campaign
NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
FortiBleed: 86,000 Fortinet Device Credentials Compromised
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.
The Top 10 Attack Surface Exposures in 2026
C0XMO botnet spreads via DD-WRT router flaw, kills rival malware
Attackers obtained encrypted password vaults from some Dashlane user accounts
Claude Code has an MCP security problem — and your developers are already using it
Dashlane explains how attackers managed to download encrypted password vaults
Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine
Dashlane issues opaque advisory warning 20 encrypted vaults were stolen
Dashlane Brute-Force Attack Leads to Limited Encrypted Vault Downloads
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
Dashlane accounts suspended amid brute-force attack
Dashlane password manager users locked out by brute force attacks
Russian hacker used AI to run fraud scheme on MAGA Telegram channel
Brute-force attack triggers Dashlane account lockouts
Password manager Dashlane suspends customer accounts amid brute-force attacks
[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting
California AG sues 23andMe over 2023 breach exposing health data
Dutch cops wrest 17M devices from mystery botnet's clutches
California Sues 23andMe, Alleging It Failed to Protect User Data in 2023 Breach
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Attackers exploit SonicWall VPN vulnerability to bypass MFA
Hackers bypass SonicWall VPN MFA due to incomplete patching
WantToCry ransomware remotely encrypts files
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
Siemens SIPROTEC 5
Mini Shai-Hulud Hits TanStack npm Packages
Official CheckMarx Jenkins package compromised with infostealer
Chinese-linked Salt Typhoon suspected in Italy's Sistemi Informativi breach
1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom
TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack
Three Arrested for Hacking Over 610,000 Roblox Accounts
New Checkmarx supply-chain breach affects KICS analysis tool
Mythos: An AI tool too powerful for public release
Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet
Horner Automation Cscape and XL4, XL7 PLC
Researchers Spot Surge in Brute-Force Attacks from Middle East
Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
Guardarian Users Targeted With Malicious Strapi NPM Packages
npm-sentinel: 21 malicious npm packages in 24h including LLM API MITM, encrypted skill backdoors, and Redis weaponization via postinstall
Defending Your Software Supply Chain: What Every Engineering Team Should Do Now
AI Interview startup, Mercor Al breached via LiteLLM supply chain attack. Lapsus$ claims 4TB data breached including 211 GB candidate records and 3TB of video interviews
Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne
From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI
New Malware Highlights Increased Systematic Targeting of Network Infrastructure
New Malware Highlights Increased Systematic Targeting of Network Infrastructure
Accertify’s Attack State targets credential stuffing and ATO attacks
Authentication Lockout Bypass via Race Condition
Authentication rate-limit bypass permits to brute force admin logins
UAT-9244 targets South American telecommunication providers with three new malware implants
How a Brute Force Attack Unmasked a Ransomware Infrastructure Network
CyberStrikeAI tool adopted by hackers for AI-powered attacks
OpenClaw Vulnerability Allowed Websites to Hijack AI Agents
ClawJacked Bug Enables Covert AI Agent Hijacking
ClawJacked attack let malicious websites hijack OpenClaw to steal data
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket
Your personal OpenClaw agent may also be taking orders from malicious websites
Chargemap chargemap.com
Hacker knackt 600 Firewalls in einem Monat – mit KI
Take control: Locking down common endpoint vulnerabilities
Russian group uses AI to exploit weakly-protected Fortinet firewalls, says Amazon
600+ FortiGate Devices Hacked by AI-Armed Amateur
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Unit 42: Nearly two-thirds of breaches now start with identity abuse
Medusa Ransomware 2025: RMM Abuse in Ransomware Campaigns
SSHStalker botnet preys on legacy Linux & cloud hosts
SSHStalker botnet uses old-school IRC for large-scale Linux attacks
SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning
World Leaks Ransomware Group Adds Stealthy, Custom Malware ‘RustyRocket’ to Attacks
SSHStalker botnet brute-forces its way onto 7,000 Linux machines
New Linux botnet SSHStalker uses old-school IRC for C2 comms
Password guessing without AI: How attackers build targeted wordlists
Men charged in FanDuel scheme fueled by thousands of stolen identities