Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The …
Category:
Cyber Security
- Cyber Security
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
by Wire Techby Wire TechMalware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a …
- Cyber SecurityTechnology
Microsoft SharePoint zero-day exploited in RCE attacks, no patch available
by Wire Techby Wire TechA critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, has been actively exploited since at least July 18th, with no patch available and at least 85 servers already compromised …
- Cyber SecurityTechnology
HPE warns of hardcoded passwords in Aruba access points
by Wire Techby Wire TechHewlett-Packard Enterprise (HPE) is warning of hardcoded credentials in Aruba Instant On Access Points that allow attackers to bypass normal device authentication and access the web interface. Aruba Instant On …
- Cyber SecurityTechnology
Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack
by Wire Techby Wire TechA PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals. …
- Cyber SecurityTechnology
Popular npm linter packages hijacked via phishing to drop malware
by Wire Techby Wire TechPopular JavaScript libraries were hijacked this week and turned into malware droppers, in a supply chain attack achieved via targeted phishing and credential theft. The npm package eslint-config-prettier, downloaded over …
- Cyber SecurityTechnology
ChatGPT”s GPT-5-reasoning-alpha model spotted ahead of launch
by Wire Techby Wire TechGPT-5 might be just a few days or weeks away, as we've spotted references to a new model called gpt-5-reasoning-alpha-2025-07-13. As spotted on X, OpenAI is testing a model called …
- Cyber SecurityTechnology
OpenAI, Anthropic, Google may disrupt education market with new AI tools
by Wire Techby Wire TechAI companies could soon disrupt the education market with their new AI-based learning tools for students. BleepingComputer recently reported that OpenAI is working on a Study Together feature for ChatGPT. …
- Cyber Security
China’s Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones
by Wire Techby Wire TechChina's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones Cybersecurity researchers have shed light on a mobile forensics tool called Massistant that's used by law enforcement …