News

The Hacker News4h
ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks
ConnectWise rotates ScreenConnect certificates by June 13 after config data concerns, impacting on-prem users to prevent ...
The Hacker News6h
Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool
A new ATO campaign using TeamFiltration breached 80,000+ Microsoft Entra ID accounts via password spraying, impacting ...
The Hacker News1h
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
Critical zero-click AI vulnerability EchoLeak exposed sensitive Microsoft 365 Copilot data; Microsoft patched it to prevent data leaks.
The Hacker News18h
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks
Black Basta affiliates use Teams phishing, Python scripts, and cURL to attack finance, insurance, and construction sectors.
The Hacker News22h
295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager
To that end, 295 unique IP addresses have been found to be engaged in brute-force attempts against Tomcat Manager on that ...
The Hacker News1h
Non-Human Identities: How to Address the Expanding Security Risk
70% of secrets from 2022 remain active in 2025, putting enterprises’ machine identities at risk of breaches and compliance ...