Microsoft primes 71 fixes for May Patch Tuesday
Five issues actively exploited in the wild, but the real excitement may have been handled in advance
Similar Posts
Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America
Bys sThe threat actor known as Dark Caracal has been attributed to a campaign that deployed a remote access trojan called Poco RAT in attacks targeting Spanish-speaking targets in Latin America in 2024. The findings come from Russian cybersecurity company Positive Technologies, which described the malware as loaded with a “full suite of espionage features.” “It…
Hackers Breached Propulsion System of U.S.-Bound Oil Tanker
Bys sSeen on Homeland Security Today: FBI and US Coast Guard investigators have found evidence that hackers accessed the propulsion system of an oil supertanker as it was approaching the Texas coast this summer, according to US officials familiar with the matter, an extraordinary breach that highlights the growing physical risks from cyberattacks. The cyberattack resulted……
Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
Bys sJake Kanter reports: The cyber-attack on Prospect, the parent union of film and TV group Bectu, has sparked fears that it could have compromised information pertaining to the UK’s national security. Deadline revealed earlier this month that the majority of Prospect’s 150,000 members had their data breached during an “IT security incident” in June. Our original……
Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host
Bys sCybersecurity researchers have uncovered multiple critical security vulnerabilities impacting the Versa Concerto network security and SD-WAN orchestration platform that could be exploited to take control of susceptible instances. It’s worth noting that the identified shortcomings remain unpatched despite responsible disclosure on February 13, 2025, prompting a public release of the issues
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
Bys sThe threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster, has been attributed to a third attack campaign codenamed DarkSpectre that has impacted 2.2 million users of Google Chrome, Microsoft Edge, and Mozilla Firefox. The activity is assessed to be the work of a Chinese threat actor that Koi Security is tracking under…
Your AI Agents Are Already Inside the Perimeter. Do You Know What They’re Doing?
Bys sAnalysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than enterprises can govern them. In their inaugural Market Guide for Guardian Agents, Gartner states that “enterprise adoption of AI agents is accelerating, outpacing maturity of governance policy controls.” Enterprise leaders can request access to the Gartner Market Guide…