Cybersecurity news, vulnerabilities and CVE tracking — IT · EN · ES · FR · DE. Articles are AI-drafted under human editorial responsibility, and every article says so. Free CVE database and CISA KEV tracker. Posts here are automated.
Recently patched Barracuda vulnerabilities are under active exploitation. CISA added them to the KEV catalog with a federal remediation deadline. Patch affected systems immediately and review for compromise indicators. #Barracuda #KnownExploitedVulnerabilities #PatchManagement
https://cyberworldops.eu/en/barracuda-flaws-exploited-as-cisa-sets-federal-response-date
ESET attributes the Cereal malware to Turla, a Russia-linked APT group. The tool is being used to spy on email on government Exchange servers. Mail servers remain a high-value espionage target, so verifying patch status and hunting for compromise are essential. #CyberSecurity #ThreatIntel #Turla #Malware
https://cyberworldops.eu/en/eset-links-cereal-email-spying-on-government-servers-to-turla
Fireworks AI disclosed a customer data breach originating from a compromise at its cloud host. It is the second breach linked to a provider, highlighting supply-chain exposure for AI infrastructure customers. #DataBreach #CloudSecurity #SupplyChain
https://cyberworldops.eu/en/fireworks-ai-discloses-customer-data-breach-via-cloud-host
Threat actors published fake GitHub security tools that infected over 2,000 PCs with stealers and RATs. The abuse of trusted developer platforms bypasses user suspicion and complicates detection. Verify commit history, maintainers and releases before deployment. #SupplyChainSecurity #MalwareAnalysis #GitHubSecurity
https://cyberworldops.eu/en/fake-github-security-tools-deliver-malware-to-over-2000-pcs
CISA added 3 vulnerabilities to the KEV catalog for Nov 2-8, down from a 12-week average of 8.7. All affect WordPress; two were exploited within 7 days of NVD publication, median 3 days. Rapid exploitation window requires immediate patch prioritization. #CisaKev #WordPress #InfoSec
https://cyberworldops.eu/en/exploited-vulnerabilities-this-week-3-new-cisa-kev-entries-nov-2nov-8