Vulnerable U

Vulnerable U

Infosec's favorite weekly newsletter for news, tools, and tips with 18,000+ CISOs, founders, change-makers, and straight up hackers.

I consent to receive newsletters via email. Terms of Use and Privacy Policy.

Connect

Featured Posts

🎓️ Vulnerable U | #079

🎓️ Vulnerable U | #079

Telegram CEO saga, Russian APT group using Predator and Pegasus spyware code, Bounty for info on Angler Exploit Dev, Volt Typhoon 0day hacking ISPs, and more!

Matt Johansen
Matt Johansen
🎓️ Vulnerable U | #080

🎓️ Vulnerable U | #080

YubiKey cloning attack, Russian military hackers wanted by FBI, Uncovering an Iranian Counterintelligence Op, Russian paying popular US social media influencers, Founder mode, and more!

Matt Johansen
Matt Johansen
NewsletterNewsletter
🎓️ Vulnerable U | #081

🎓️ Vulnerable U | #081

Fortinet breached, Recorded Future acquired for over $2b, FBI's cryptocurrency fraud report, New Android Malware, Fake coding interviews, and more!

Matt Johansen
Matt Johansen

Latest Posts

NewsNews
U.S. Charges Five Alleged Members of Scattered Spider Cybercrime Group

U.S. Charges Five Alleged Members of Scattered Spider Cybercrime Group

Scattered Spider first emerged in 2022 and quickly became a significant pest

Newsroom
Newsroom
VulnerabilityVulnerability
+1+1
Two Apple Flaws Used in Attacks on Intel-Based Macs

Two Apple Flaws Used in Attacks on Intel-Based Macs

Apple has rushed out emergency patches for two zero-day flaws in Macs, iPhones and iPads.

Newsroom
Newsroom
NewsNews
Phobos Ransomware Administrator Extradited to U.S.

Phobos Ransomware Administrator Extradited to U.S.

A Russian national who allegedly served as an administrator for the Phobos ransomware was extradited from South Korea to the U.S.

Newsroom
Newsroom

Archive

NewsNews
U.S. Charges Five Alleged Members of Scattered Spider Cybercrime Group

U.S. Charges Five Alleged Members of Scattered Spider Cybercrime Group

Scattered Spider first emerged in 2022 and quickly became a significant pest

Newsroom
Newsroom
VulnerabilityVulnerability
+1+1
Two Apple Flaws Used in Attacks on Intel-Based Macs

Two Apple Flaws Used in Attacks on Intel-Based Macs

Apple has rushed out emergency patches for two zero-day flaws in Macs, iPhones and iPads.

Newsroom
Newsroom
NewsNews
Phobos Ransomware Administrator Extradited to U.S.

Phobos Ransomware Administrator Extradited to U.S.

A Russian national who allegedly served as an administrator for the Phobos ransomware was extradited from South Korea to the U.S.

Newsroom
Newsroom
MicrosoftMicrosoft
+1+1
Microsoft Wants You to Hack Its AI

Microsoft Wants You to Hack Its AI

Microsoft is launching a new addition to its bug bounty program, along with a new, invitation-only hacking contest

Newsroom
Newsroom
VulnerabilityVulnerability
VMware Confirms Exploitation of vCenter Server Bugs

VMware Confirms Exploitation of vCenter Server Bugs

VMware said threat actors are now exploiting previously disclosed flaws (CVE-2024-38812 and CVE-2024-38813) in vCenter Server.

Newsroom
Newsroom
NewsNews
Attackers Target PAN-OS Zero Day

Attackers Target PAN-OS Zero Day

Palo Alto has not yet released a fix for the critical RCE flaw.

Newsroom
Newsroom
🎓️ Vulnerable U | #090

🎓️ Vulnerable U | #090

China hacking telecoms targeting government and political officials, Top 15 exploited bugs according to CISA, Palo Alto Networks, SAP, Microsoft, and Citrix bugs, and more!

Matt Johansen
Matt Johansen
Mental HealthMental Health
The Myth of Arrival

The Myth of Arrival

Exploring the Concept of Feeling Incomplete Despite Achieving Success

Matt Johansen
Matt Johansen
NewsNews
+1+1
FBI: ‘Broad and Significant’ Chinese Telecom Hack Impacts U.S. Officials

FBI: ‘Broad and Significant’ Chinese Telecom Hack Impacts U.S. Officials

Chinese threat actors stole customer call records data, targeted “a limited number” of individuals and copied “certain information that was subject to U.S. law enforcement requests pursuant to court orders," according to a new FBI statement

Newsroom
Newsroom
NewsNews
New Bug Allows RCE on Citrix Virtual Apps and Desktop

New Bug Allows RCE on Citrix Virtual Apps and Desktop

Citrix has released fixes for two vulnerabilities in the Session Recording feature of its Virtual Apps and Desktop products that can lead to remote code execution

Newsroom
Newsroom
NewsNews
Strela Stealer Malware Attacks Target Outlook, Thunderbird Credentials

Strela Stealer Malware Attacks Target Outlook, Thunderbird Credentials

Strela Stealer campaigns are intensifying as threat actors leverage legitimate stolen emails in their phishing attacks.

Newsroom
Newsroom
MicrosoftMicrosoft
+1+1
Microsoft Fixes Exploited Windows Task Scheduler Bug

Microsoft Fixes Exploited Windows Task Scheduler Bug

Microsoft has fixed an important-severity EoP bug in Windows Task Scheduler (CVE-2024-49039), which is being exploited in attacks.

Newsroom
Newsroom