ONSEC: Boutique Penetration Testing Agency

Sign in Subscribe

ONSEC.io Research Team

ONSEC.io Research Team

Cyber Daily 3/27: Next.js Middleware Vulnerability, Active SAP Exploitation, DrayTek Router Issues, Chrome's CVE-2025-2783 Patch, Ghostscript Threats

Cyber Daily 3/27: Next.js Middleware Vulnerability, Active SAP Exploitation, DrayTek Router Issues, Chrome's CVE-2025-2783 Patch, Ghostscript Threats

Welcome to your daily dose of ONSEC Cyber Daily, where we bring you the most critical cybersecurity updates. Today, we're unraveling a web of vulnerabilities and patches that have been making waves in the cybersecurity world. First up, we have a middleware vulnerability in Next.js (CVE-2025-29227) that

Cyber Daily 3/26: Google's Chrome Patch for Russian Espionage, DrayTek Router Vulnerabilities, Kubernetes Ingress-NGINX Flaws, Ukraine Infrastructure Attacks

Cyber Daily 3/26: Google's Chrome Patch for Russian Espionage, DrayTek Router Vulnerabilities, Kubernetes Ingress-NGINX Flaws, Ukraine Infrastructure Attacks

Welcome to your ONSEC Cyber Daily dose for March 26th. Today, we're diving into a whirlwind of cyber threats and security patches. Google has released a Chrome patch to counter an exploit used in Russian espionage attacks, while DrayTek routers are under active exploitation due to vulnerabilities disclosed

Cyber Daily 3/25: FBI Warns of Threats to Hospitals, Ukraine Defense Sector Under Attack, Critical Vulnerabilities in Next.js, Kubernetes, Cisco CSLU, and Veeam Software

Cyber Daily 3/25: FBI Warns of Threats to Hospitals, Ukraine Defense Sector Under Attack, Critical Vulnerabilities in Next.js, Kubernetes, Cisco CSLU, and Veeam Software

Good morning, ONSEC Cyber Daily readers! Today, we're diving into a whirlwind of cyber threats and vulnerabilities that are shaking up the digital landscape. The FBI and healthcare agencies have issued a stern warning about a credible threat against hospitals, following a multi-city social media terror plot alert.

Cyber Daily 3/21: Veeam and IBM Patch High-Risk Flaws, Google Chrome Users Warned of Cyber Threats, Dell and CISA Alert on Vulnerabilities, Chinese Hackers Exploit Exchange Vulnerabilities

Cyber Daily 3/21: Veeam and IBM Patch High-Risk Flaws, Google Chrome Users Warned of Cyber Threats, Dell and CISA Alert on Vulnerabilities, Chinese Hackers Exploit Exchange Vulnerabilities

Good morning, ONSEC Cyber Daily readers! In today's issue, we're diving into a sea of vulnerabilities and patches. We start with Veeam's critical update patching a backup software vulnerability, a move that has sent ripples across the information security sector. But it's

Cyber Daily 3/20: Clovis Scam, FBI Warns of Gmail and Outlook Attacks, Microsoft Alerts on StilachiRAT, CISA Highlights Fortinet and GitHub Vulnerabilities, CERT NZ Advises on Apache Tomcat

Cyber Daily 3/20: Clovis Scam, FBI Warns of Gmail and Outlook Attacks, Microsoft Alerts on StilachiRAT, CISA Highlights Fortinet and GitHub Vulnerabilities, CERT NZ Advises on Apache Tomcat

Welcome to your ONSEC Cyber Daily dose for March 20. Today, we're diving into a series of alarming cybersecurity incidents and vulnerabilities that are making headlines. Starting off in Clovis, where residents have fallen victim to a scam that has seen over $230K stolen. This incident serves as

Cyber Daily 3/19: SquareX Exposes Browser Vulnerabilities, CISA Adds Exploited Flaws to Catalog, AMI BMC and DeepSeek AI Vulnerabilities Raise Concerns, Google and Linux Patch Critical Issues

Cyber Daily 3/19: SquareX Exposes Browser Vulnerabilities, CISA Adds Exploited Flaws to Catalog, AMI BMC and DeepSeek AI Vulnerabilities Raise Concerns, Google and Linux Patch Critical Issues

Welcome to your daily dose of ONSEC Cyber Daily! Today, we're diving into the world of cyber vulnerabilities and the steps being taken to combat them. SquareX's "Year of Browser Bugs" project is shining a light on critical cybersecurity blind spots, while Google launches

Cyber Daily 3/18: Samsung's 7-Day Update Deadline, TP-Link and GitHub Vulnerabilities, Remote Hacks on Commercial Vehicles, Microsoft and Adobe Patching Critical Flaws

Cyber Daily 3/18: Samsung's 7-Day Update Deadline, TP-Link and GitHub Vulnerabilities, Remote Hacks on Commercial Vehicles, Microsoft and Adobe Patching Critical Flaws

Welcome to the ONSEC Cyber Daily for March 18, 2025. Today, we're diving into a sea of vulnerabilities and patches. Samsung is facing an impossible deadline, urging users to update their phones within 7 days to avoid potential disasters. Meanwhile, the job market is buzzing with opportunities for