Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-45454 Microsoft veřejná správa finance zdravotnictví školství US
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-45648 veřejná správa US
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.07 CVE-2026-42980 veřejná správa US
Varovanie pred phishingovou kampaňou Národné centrum kybernetickej bezpečnosti (NCKB) NBÚ varuje pred rozsiahlou phishingovou kampaňou zameranou primárne na súkromné firmy a štátne inštitúcie. Jej cieľom je vylákať od obetí prihlasovacie údaje k ich e-mailovým schránkam. Predmetná kampaň sa šíri prostredníctvom e-mailov s tematikou upozornení na vypršanie platnosti hesla k poštovej schránke a text správy používateľa vyzýva na reakciu. Útočníci... The post Útočníci zneužívajú no-code platformu…
Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships.
KEV ✓ · ransomware EPSS 0.94 CVE-2025-8088 WinRAR veřejná správa JP
In this LABScon 25 presentation, ESET researchers Matthieu Faou and Zoltán Rusnák present the first technical evidence that Gamaredon actively facilitated Turla’s access to high-value Ukrainian targets in Ukraine. Across incidents observed between February and June 2025, Gamaredon tooling, including PteroGraphin and PteroOdd, was used to deploy Turla’s Kazuar backdoor and, in at least one case, restore Turla’s access after the group appeared to have lost its foothold. The talk opens with a…
Teams at Omnea, Cognism, Glasswall, Raisin and the UK public sector reveal why EDR and MDM miss what's really happening on developer machines. Category: News
CARNET je u suradnji s Nacionalnim centrom za kibernetičku sigurnost (NCSC-HR) i Nacionalnim CERT-om pokrenuo informativnu kampanju s ciljem podizanja svijesti o obvezama koje proizlaze iz Zakona o kibernetičkoj sigurnosti te o važnosti prijave incidenata putem platforme PiXi. Kibernetički napadi postali su svakodnevna prijetnja organizacijama u javnom i privatnom sektoru. Njihove posljedice mogu uključivati financijske gubitke, narušavanje ugleda, prekid poslovanja te ugrožavanje osjetljivih…
Починаючи з весни 2026 року, CERT-UA фіксує численні випадки розсилання електронних листів серед державних організацій із використанням скомпрометованих облікових записів, зокрема із використанням тематики отримання сертифікатів через онлайн-платформу Prometheus.
Upozorňujeme na smishingovou kampaň, v rámci které se útočníci prostřednictvím SMS zpráv vydávají za Policii České republiky s cílem získat platební údaje obětí.
On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) products. According to the update, the ArcaneDoor threat actor has developed a previously unknown persistence mechanism that is preserved across upgrading to the fixed releases that…
KEV ✓ EPSS 0.87 CVE-2025-20333 CVE-2025-20362 Cisco veřejná správa US
Nacionalni CERT zaprimio je niz prijava građana o SMS porukama u kojima ih se lažno obavještava o navodnim prometnim prekršajima i navodi na otvaranje zlonamjernih poveznica te unos osobnih i financijskih podataka. Građani dobivaju SMS poruke u kojima se navodi da je njihovo vozilo evidentirano zbog prekršaja iz Zakona o sigurnosti cestovnog prometa. U poruci se nalazi poveznica za navodno plaćanje kazne koja vodi na lažnu internetsku stranicu, vizualno sličnu Službenom portalu za rješavanje…
TrendAI™ Research has identified two emerging threat campaigns—SHADOW-AETHER-040 and SHADOW-AETHER-064—that use agentic AI to drive intrusion operations against government and financial organizations in Latin America, marking these among the first cases we have observed of AI agents executing attacks from initial access to data exfiltration.
A deeper look at the first three pillars and outlining how our capabilities directly support government agencies working to bring this strategy to life.
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month
A China-aligned threat group is exploiting unpatched Microsoft Exchange vulnerabilities to conduct cyberespionage against government and critical infrastructure targets across Asia and beyond.
New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.
Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
SilentGlass, a plug-and-play device, actively blocks any unexpected or malicious HDMI and Display Port connections.
Zjednodušili jsme proces hlášení a změn regulovaných služeb na Portálu NÚKIB. Nově se všechny úkony provádí prostřednictvím formuláře Ohlášení a správa regulované služby.
CERT-UA протягом березня-квітня 2026 року зафіксовано інтенсифікацію кібератак у відношенні органів місцевого самоврядування та, насамперед, комунальних закладів охорони здоров'я, зокрема клінічних лікарень та лікарень екстреної (швидкої) медичної допомоги.
The first quarter of 2026 has reinforced a hard truth: U.S. government agencies and educational institutions are operating in the most hostile cyber threat environment ever recorded.
A threat actor enumerated our entire AD with Get-ADComputer, and none of our detections fired. The problem wasn't their evasion - it was an architectural blind spot in how PowerShell talks to Active Directory.
A phishing campaign has been reported leveraging the EvilTokens Phishing-as-a-Service platform to target O365 users. The attackers use device code phishing to bypass Multi-Factor Authentication (MFA), and they also utilize Railway to host their malicious infrastructure. The ca...
TrendAI reviews the White House National Cyber Strategy, outlining six pillars to strengthen U.S. cybersecurity—from deterrence and regulation to federal modernization, critical infrastructure protection, AI leadership, and workforce development.
Національною командою реагування на кіберінциденти, кібератаки, кіберзагрози CERT-UA 26-27 березня 2026 року зафіксовано випадки розповсюдження електронних листів нібито від імені CERT-UA із закликом завантажити з сервісу Files.fm захищений паролем архів ("CERT_UA_protection_tool.zip", "protection_tool.zip") та встановити "спеціалізоване програмне забезпечення". Серед отримувачів листів: державні організації, медичні центри, охоронні фірми, навчальні заклади, фінансові установи, компанії…
This blog discusses the steganography, cloud abuse, and email-based backdoors used against the Ukrainian defense supply chain in the latest Pawn Storm campaign that TrendAI™ Research observed and analyzed.
Hello, this is Shihono from the Global Coordination Division. In early March, we traveled to Baku, the capital of Azerbaijan, and had the opportunity to visit five organizations, including CSIRTs and facilities involved in cyber security workforce development. In this article, I would like to introduce an overview of these visits. Azerbaijan, the “Land of Fire,” and Its Capital Baku, the “City of Winds” Baku cityscape and the Caspian Sea Azerbaijan is located in the Caucasus region, which…
Technion – Israel Institute of Technology veřejná správa školství JP
Railway PaaS is being weaponized as a clean token replay engine in an active AiTM and device code phishing campaign impacting 268+ M365 organizations and 100+ MSPs.
Microsoft finance zdravotnictví veřejná správa telekomunikace US
Le CERT-FR observe une recrudescence de campagnes d’attaques ciblant les comptes de messagerie instantanées. Ces campagnes ciblent particulièrement les secteurs régaliens (personnalités politiques, cadres de l’administration) mais aussi les personnels de la société civile exerçant des fonctions...
In response to the evolving events in the Middle East, the NCSC is advising that UK organisations review their cyber security posture.
Починаючи з січня 2026 року CERT-UA фіксує непоодинокі випадки розповсюдження електронних листів, нібито від імені центральних органів виконавчої влади та обласних адміністрацій із закликом оновити мобільні застосунки широко використовуваних цивільних і військових систем.
Continuing from the previous report, this second installment introduces the presentations delivered during the Day 2 Main Track. Following the Trace: Reconstructing Attacks from Ext4 and XFS Journals Speaker: Minoru Kobayashi, Internet Initiative Japan Inc. Presentation Materials (English) Minoru Kobayashi presented an approach for inferring file operations and reconstructing them as a timeline based on the journal structures and analysis methods of the ext4 and XFS file systems. Through a…
Internet Initiative Japan Inc. NTT DOCOMO BUSINESS, Inc. Recruit Co., Ltd. finance veřejná správa doprava JP