Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

5 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 5 most recent headlines Filtered view

If you're still running a vulnerable instance then 'assume a breach' More than 600 IP addresses are launching thousands of exploit attempts against CVE-2023-22527 – a critical bug in out–of-date versions of Atlassian Confluence Data Center and Server – according to non-profit security org Shadowserver.…

More from The Register 23 Jan 2024, 12:37 p.m. Actively exploited CVE-2023-22527 Breach Critical Vulnerability CVE Exploit Remote Code Execution Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning about hackers actively exploiting a critical vulnerability in Adobe ColdFusion identified as CVE-2023-26360 to gain initial access to government servers. [...]

More from Bleeping Computer 6 Dec 2023, 6:07 a.m. Actively exploited CVE-2023-26360 Adobe America Breach CISA Critical Vulnerability CVE Exploit Government Initial Access Vulnerability Warning
Bleeping Computer 2 years, 10 months ago

Hackers use public ManageEngine exploit to breach internet org

The North Korean state-backed hacker group tracked as Lazarus has been exploiting a critical vulnerability (CVE-2022-47966) in Zoho's ManageEngine ServiceDesk to compromise an internet backbone infrastructure provider and healthcare organizations. [...]

More from Bleeping Computer 25 Aug 2023, 12:31 a.m. Actively exploited CVE-2022-47966 Breach Compromise Critical Infrastructure Critical Vulnerability CVE Exploit Healthcare Lazarus North Korea Vulnerability