GoKawiil
1.
2.
3.
Critical Microsoft SharePoint flaw now exploited in attacks
(bleepingcomputer.com)
4.
PSA: Hackers can raid iOS 18 with an infected link
(theverge.com)
5.
New “Darksword” iOS exploit used in infostealer attack on iPhones
(bleepingcomputer.com)
6.
Warlock Ransomware Group Augments Post-Exploitation Activities
(darkreading.com)
7.
Qualcomm responds to GBL exploit used on latest Snapdragon flagships
(androidauthority.com)
8.
Most Google Cloud Attacks Start With Bug Exploitation
(darkreading.com)
9.
Apple patches older iPhones and iPads against Coruna exploits
(bleepingcomputer.com)
10.
Apple releases iOS 15.8.7 to fix Coruna exploit for iPhone 6S from 2015
(news.ycombinator.com)
11.
12.
Hacker broke into FBI and compromised Epstein files, report says
(techcrunch.com)
13.
14.
Flaw in Grandstream VoIP phones allows stealthy eavesdropping
(bleepingcomputer.com)
15.
CISA orders feds to patch actively exploited Dell flaw within 3 days
(bleepingcomputer.com)
16.
Google patches first Chrome zero-day exploited in attacks this year
(bleepingcomputer.com)
17.
Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks
(darkreading.com)
18.
Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware
(news.ycombinator.com)
19.
Apple fixes zero-day flaw used in 'extremely sophisticated' attacks
(bleepingcomputer.com)
20.
iOS 26.3 and macOS 26.3 Fix Dozens of Vulnerabilities, Including Zero-Day
(news.ycombinator.com)
21.
22.
Sleeper Shells: Attackers Are Planting Dormant Backdoors in Ivanti EPMM
(news.ycombinator.com)
23.
CISA: VMware ESXi flaw now exploited in ransomware attacks
(bleepingcomputer.com)
24.
Ivanti warns of two EPMM flaws exploited in zero-day attacks
(bleepingcomputer.com)
25.
26.
Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest
(darkreading.com)
27.
Microsoft Rushes Emergency Patch for Office Zero-Day
(darkreading.com)
28.
WinRAR path traversal flaw still exploited by numerous hackers
(bleepingcomputer.com)
29.
Critical sandbox escape flaw found in popular vm2 NodeJS library
(bleepingcomputer.com)
30.
Critical sandbox escape flaw discovered in popular vm2 NodeJS library
(bleepingcomputer.com)