ONSEC: Boutique Penetration Testing Agency

Sign in Subscribe

ONSEC.io Research Team

ONSEC.io Research Team

Cyber Daily 3/14: Win32 Bug Exploited for Two Years, Aptori's AI Reduces Risk, Security Cameras Hijacked into Botnet, CISA Warns of Juniper and Medusa Threats

Cyber Daily 3/14: Win32 Bug Exploited for Two Years, Aptori's AI Reduces Risk, Security Cameras Hijacked into Botnet, CISA Warns of Juniper and Medusa Threats

Welcome to the ONSEC Cyber Daily for March 14th. Today, we're diving into a whirlwind of cyber threats and vulnerabilities that have been making headlines. We start with a two-year-old Win32 bug that malicious actors have been exploiting, despite its recent fix. This high-severity zero-day vulnerability in the

Cyber Daily 3/13: iOS 18.3.2 Warning for iPhone Users, Windows Zero-Day Attacks, CISA Alerts on NTFS Exploit, Microsoft and Apple Patch Critical CVEs

Cyber Daily 3/13: iOS 18.3.2 Warning for iPhone Users, Windows Zero-Day Attacks, CISA Alerts on NTFS Exploit, Microsoft and Apple Patch Critical CVEs

Welcome to the ONSEC Cyber Daily, your one-stop source for the latest cybersecurity news. Today, we're diving into a series of critical updates and warnings issued for both Apple and Microsoft users. Apple has released an urgent update for iOS 18.3.2, following the discovery of an

Cyber Daily 3/12: CISA Warns of Microsoft Windows MMC Exploit, Cybersecurity Burnout Crisis, ArmorCode's New Partner Program, Google Chrome's Critical Vulnerabilities, Apple and Microsoft's Urgent Patches

Cyber Daily 3/12: CISA Warns of Microsoft Windows MMC Exploit, Cybersecurity Burnout Crisis, ArmorCode's New Partner Program, Google Chrome's Critical Vulnerabilities, Apple and Microsoft's Urgent Patches

Good morning, ONSEC Cyber Daily readers! Today's issue is packed with crucial updates from the cybersecurity world. The CISA has issued an alert on the active exploitation of a Microsoft Windows MMC vulnerability, reminding us of the constant battle against cyber threats. Meanwhile, the cybersecurity sector is grappling

Cyber Daily 3/11: Security Cameras Hijacked into Botnet, Widespread PHP Vulnerability Attacks, Bluetooth Chip Identity Theft, Federal Contractor Vulnerability Disclosure Program

Cyber Daily 3/11: Security Cameras Hijacked into Botnet, Widespread PHP Vulnerability Attacks, Bluetooth Chip Identity Theft, Federal Contractor Vulnerability Disclosure Program

Good morning ONSEC Cyber Daily readers! Today's issue is packed with critical updates and insights from the cybersecurity world. We kick off with a warning about a top security camera maker's devices being hijacked into a botnet, a result of cybercriminals exploiting a command injection vulnerability.

Cyber Daily 3/7: IVF, Genea Under Attack, Microsoft Battles Storm-2139, VMware Zero-Days Exploited, Telegram Vulnerability, Hitachi Energy Security Issues

Cyber Daily 3/7: IVF, Genea Under Attack, Microsoft Battles Storm-2139, VMware Zero-Days Exploited, Telegram Vulnerability, Hitachi Energy Security Issues

Welcome to the ONSEC Cyber Daily, your one-stop source for the latest in cybersecurity news. Today, we're diving into a series of critical cyber threats and vulnerabilities that are making headlines across the globe. First up, we're looking at the recent IVF cyber attack in Australia,

Cyber Daily 3/6: Google and CISA Alert on Android and VMware Exploits, Vim Vulnerability Allows Code Execution, AI Soft Unveils Alli AI

Cyber Daily 3/6: Google and CISA Alert on Android and VMware Exploits, Vim Vulnerability Allows Code Execution, AI Soft Unveils Alli AI

Welcome to the ONSEC Cyber Daily newsletter for March 6th. Today, we're diving into a series of vulnerabilities that have been making waves in the cybersecurity world. First up, we have a newly discovered Vim vulnerability (CVE-2025-27423) that allows code execution via malicious TAR archives. This is a

Cyber Daily 3/5: Google and VMware Race to Patch Critical Vulnerabilities, CISA Adds New Exploits to Catalog, Chinese Cyber Espionage on the Rise

Cyber Daily 3/5: Google and VMware Race to Patch Critical Vulnerabilities, CISA Adds New Exploits to Catalog, Chinese Cyber Espionage on the Rise

Welcome to today's issue of ONSEC Cyber Daily. We're diving into a whirlwind of warnings, vulnerabilities, and urgent patches that are making waves in the cybersecurity landscape. Google has set a 20-day deadline for Android users to update their phones due to an unspecified vulnerability, CVE-2024-43093,