ONSEC: Boutique Penetration Testing Agency

Sign in Subscribe

ONSEC.io Research Team

ONSEC.io Research Team

Cyber Daily 4/3: Critical CrushFTP Vulnerability Exploited, Apple's iOS 18.4 Security Alert, Ivanti Bug Alert by CISA, NSA Warns iPhone and Android Users, Canon Printer Drivers Vulnerability, Kaspersky Patches Chrome Flaw

Cyber Daily 4/3: Critical CrushFTP Vulnerability Exploited, Apple's iOS 18.4 Security Alert, Ivanti Bug Alert by CISA, NSA Warns iPhone and Android Users, Canon Printer Drivers Vulnerability, Kaspersky Patches Chrome Flaw

Welcome to the latest issue of ONSEC Cyber Daily! Today, we're diving into a series of critical vulnerabilities and security warnings that are making waves in the cybersecurity world. First up, we're looking at the ongoing intrusions involving the CrushFTP vulnerability, a critical issue that'

Cyber Daily 4/2: Cowbell's Cybersecurity Expansion, Malaysian Airport Ransomware Alert, Kentico Xperience CMS XSS Vulnerability, Apple's 0-Day Warnings, Cisco and Apple CVE Updates

Cyber Daily 4/2: Cowbell's Cybersecurity Expansion, Malaysian Airport Ransomware Alert, Kentico Xperience CMS XSS Vulnerability, Apple's 0-Day Warnings, Cisco and Apple CVE Updates

Welcome to the ONSEC Cyber Daily for April 2nd! Today, we're diving into a whirlwind of cybersecurity updates and alerts. We start with Cowbell's expansion of its cybersecurity platform, integrating vulnerability scanners from Tenable, Qualys, and Rapid7. This move is a significant step towards strengthening cyber

Cyber Daily 4/1: Bitdefender Debrief, OpenSSH Vulnerability, Ivanti Zero-Day Alert, BDSM App Breach, Google Chrome Update, NSA iPhone Warning, Next.js Flaw, Chrome 0-Day, Ivanti Bug, Kubernetes Vulnerability

Cyber Daily 4/1: Bitdefender Debrief, OpenSSH Vulnerability, Ivanti Zero-Day Alert, BDSM App Breach, Google Chrome Update, NSA iPhone Warning, Next.js Flaw, Chrome 0-Day, Ivanti Bug, Kubernetes Vulnerability

Good morning, ONSEC Cyber Daily readers! In today's issue, we're diving into a sea of vulnerabilities and warnings that have been making waves in the cyber world. We begin with Bitdefender's March 2025 Threat Debrief, which highlights the relentless pursuit of cybercriminals in finding

Cyber Daily 3/28: Mozilla Patches Windows, Chrome Zero-Day Exploit, Kuala Lumpur Airport Cyberattack, Akira Ransomware Bypasses EDR, New macOS Malware Emerges

Cyber Daily 3/28: Mozilla Patches Windows, Chrome Zero-Day Exploit, Kuala Lumpur Airport Cyberattack, Akira Ransomware Bypasses EDR, New macOS Malware Emerges

Good morning, ONSEC Cyber Daily readers! Today, we're diving into a whirlwind of cybersecurity updates and alerts that have been making headlines. First off, Mozilla has released an urgent patch for Windows in response to the Chrome Zero-Day Exploit. This comes as the Kuala Lumpur Airport is hit

Cyber Daily 3/27: Next.js Middleware Vulnerability, Active SAP Exploitation, DrayTek Router Issues, Chrome's CVE-2025-2783 Patch, Ghostscript Threats

Cyber Daily 3/27: Next.js Middleware Vulnerability, Active SAP Exploitation, DrayTek Router Issues, Chrome's CVE-2025-2783 Patch, Ghostscript Threats

Welcome to your daily dose of ONSEC Cyber Daily, where we bring you the most critical cybersecurity updates. Today, we're unraveling a web of vulnerabilities and patches that have been making waves in the cybersecurity world. First up, we have a middleware vulnerability in Next.js (CVE-2025-29227) that

Cyber Daily 3/26: Google's Chrome Patch for Russian Espionage, DrayTek Router Vulnerabilities, Kubernetes Ingress-NGINX Flaws, Ukraine Infrastructure Attacks

Cyber Daily 3/26: Google's Chrome Patch for Russian Espionage, DrayTek Router Vulnerabilities, Kubernetes Ingress-NGINX Flaws, Ukraine Infrastructure Attacks

Welcome to your ONSEC Cyber Daily dose for March 26th. Today, we're diving into a whirlwind of cyber threats and security patches. Google has released a Chrome patch to counter an exploit used in Russian espionage attacks, while DrayTek routers are under active exploitation due to vulnerabilities disclosed

Cyber Daily 3/25: FBI Warns of Threats to Hospitals, Ukraine Defense Sector Under Attack, Critical Vulnerabilities in Next.js, Kubernetes, Cisco CSLU, and Veeam Software

Cyber Daily 3/25: FBI Warns of Threats to Hospitals, Ukraine Defense Sector Under Attack, Critical Vulnerabilities in Next.js, Kubernetes, Cisco CSLU, and Veeam Software

Good morning, ONSEC Cyber Daily readers! Today, we're diving into a whirlwind of cyber threats and vulnerabilities that are shaking up the digital landscape. The FBI and healthcare agencies have issued a stern warning about a credible threat against hospitals, following a multi-city social media terror plot alert.