LR pixel

Axios npm Supply Chain Compromise

von | 31. März 2026 | Unkategorisiert

What is the Attack? A software supply chain attack targeted the widely used JavaScript library Axios after an attacker reportedly compromised a maintainer’s npm account and published malicious package versions 1.14.1 and 0.30.4. These versions introduced a concealed...

DarkSword iOS Exploit Chain

von | 27. März 2026 | Unkategorisiert

What is the Attack? Researchers from Google Threat Intelligence Group identified DarkSword, a sophisticated full-chain iOS exploit framework actively used by multiple surveillance vendors and suspected state-sponsored actors. Observed since at least November 2025, the...

Handala Wiper Attack

von | 19. März 2026 | Unkategorisiert

What is the Attack? A large-scale cyberattack against medical technology company Stryker resulted in widespread system outages. The attack was driven by a destructive wiper campaign attributed to Iran-linked threat actors, including the hacktivist group Handala....

Versa Concerto SD-WAN Authentication Bypass

von | 30. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A critical security vulnerability (CVE-2025-34026) has been identified in the Versa Concerto SD-WAN orchestration platform, impacting versions 12.1.2 through 12.2.0. The issue allows unauthorized actors to bypass standard authentication...