South Korea orders security checks after bank attacks
South Korea warns bank customers about tailored scams.
Incident Response
FortiMail Operators Face Active Exploitation While Fixes Remain Upcoming
Make the response decision before the next maintenance window.
MetaMask Is Exiting Ethereum Validators Without Defining the Incident’s Scope
MetaMask reports no immediate wallet threat. Our analysis separates the validator response from the still-unknown infrastructure scope.
RedFlick Gives Star Blizzard a Shorter Route From Phishing to Persistence
Star Blizzard’s RedFlick campaigns turn an email reply into a path toward a protected archive. Defenders need to distinguish mail exposure from endpoint execution.
One Encoded URL Can Hand Attackers Cisco SD-WAN Admin Access
Cisco says attackers are exploiting a critical SD-WAN Manager flaw that turns one encoded HTTP request into administrator-level API access.
A Real ChatGPT Page Led Users Into a Fake Verification Trap
An attacker-built Custom GPT used a real ChatGPT page to lead people to a fake check on Google Sites. The practical boundary is the instruction to run code outside the browser.
DIVD Says Its Intruder’s AI Agent Left a Trail Investigators Could Follow
An intruder's automated decisions left DIVD investigators useful clues. That does not establish how much damage was done.
Adobe Commerce’s August Patch Now Comes With a Reason to Hunt for Intruders
Adobe's August bulletin said it knew of no exploitation. CISA has now placed the unauthenticated privilege-escalation flaw in KEV and called for forensic triage.
Attackers Are Already Exploiting the NetScaler Flaws Citrix Just Patched
Citrix has patched eight NetScaler vulnerabilities and confirms attackers are already exploiting two critical flaws. One unauthenticated command-execution bug affects every customer-managed deployment.
A Familiar Phone Number Helped Intruders Into Astrana Health
Astrana Health declared a material cyber incident after callers impersonated staff, spoofed its main number and reached company systems.