Packet Storm

Apple Backports Zero-Day Patches to Older iPhones and Macs

Posted:	2025/04/01
Source:	Bleeping Computer
Tag(s):	Headline, Phone, Flaw, Patch, Apple, 0 Day

CISA Spots Spawn of Spawn Malware Targeting Ivanti Flaw

Posted:	2025/04/01
Source:	The Register
Tag(s):	Headline, Government, Malware, USA, Flaw

WordPress Attackers Hide Malware in Overlooked Plugins Directory

Posted:	2025/04/01
Source:	SC Magazine
Tag(s):	Headline, Malware, Flaw, WordPress, Backdoor

DOGE Accesses Federal Payroll System and Punishes Employees Who Objected

Posted:	2025/04/01
Source:	ars technica
Tag(s):	Headline, Government, Privacy, USA, Data Loss

Critical Auth Bypass Bug in CrushFTP Now Exploited in Attacks

Posted:	2025/04/01
Source:	Bleeping Computer
Tag(s):	Headline, Hacker, Flaw

Cyber Attacks to Remain a National Emergency Event in the US

Posted:	2025/04/01
Source:	SC Magazine
Tag(s):	Headline, Government, USA, Cyberwar, Military

GCHQ Intern Took Top Secret Spy Tool Home, Now Faces Prison

Posted:	2025/04/01
Source:	The Register
Tag(s):	Headline, Government, Britain, Data Loss, Spyware

Retail Giant Sam's Club Investigates Clop Ransomware Breach Claims

Posted:	2025/03/31
Source:	Bleeping Computer
Tag(s):	Headline, Hacker, Malware, Data Loss, Cryptography

Kink and LGBT Dating Apps Exposed 1.5m Private User Images Online

Posted:	2025/03/31
Source:	BBC News UK
Tag(s):	Headline, Privacy, Data Loss

OpenAI Offering $100k Bounties for Critical Vulnerabilities

Posted:	2025/03/31
Source:	Security Week
Tag(s):	Headline, Hacker, Botnet, Flaw

Apple Backports Zero-Day Patches to Older iPhones and Macs

Posted:	2025/04/01
Source:	Bleeping Computer
Tag(s):	Headline, Phone, Flaw, Patch, Apple, 0 Day

CISA Spots Spawn of Spawn Malware Targeting Ivanti Flaw

Posted:	2025/04/01
Source:	The Register
Tag(s):	Headline, Government, Malware, USA, Flaw

WordPress Attackers Hide Malware in Overlooked Plugins Directory

Posted:	2025/04/01
Source:	SC Magazine
Tag(s):	Headline, Malware, Flaw, WordPress, Backdoor

DOGE Accesses Federal Payroll System and Punishes Employees Who Objected

Posted:	2025/04/01
Source:	ars technica
Tag(s):	Headline, Government, Privacy, USA, Data Loss

Critical Auth Bypass Bug in CrushFTP Now Exploited in Attacks

Posted:	2025/04/01
Source:	Bleeping Computer
Tag(s):	Headline, Hacker, Flaw

Cyber Attacks to Remain a National Emergency Event in the US

Posted:	2025/04/01
Source:	SC Magazine
Tag(s):	Headline, Government, USA, Cyberwar, Military

GCHQ Intern Took Top Secret Spy Tool Home, Now Faces Prison

Posted:	2025/04/01
Source:	The Register
Tag(s):	Headline, Government, Britain, Data Loss, Spyware

Retail Giant Sam's Club Investigates Clop Ransomware Breach Claims

Posted:	2025/03/31
Source:	Bleeping Computer
Tag(s):	Headline, Hacker, Malware, Data Loss, Cryptography

Kink and LGBT Dating Apps Exposed 1.5m Private User Images Online

Posted:	2025/03/31
Source:	BBC News UK
Tag(s):	Headline, Privacy, Data Loss

OpenAI Offering $100k Bounties for Critical Vulnerabilities

Posted:	2025/03/31
Source:	Security Week
Tag(s):	Headline, Hacker, Botnet, Flaw

Storm Watch (

)

2025-04-01: 7 news articles added
2025-04-01: 22 files added
2025-03-03: 1 voting poll added

2025-03-20 (1742428800)

Discovered an overly aggressive expiration check causing production API keys to disappear from view. It has been addressed. Fixed up advertisement/api managers to ensure clear visibility and usability. Reach out if there are any issues.

2025-03-12 (1741737600)

Some aesthetic updates have been done to make things a bit cleaner. That said, they were drastic and could very well have broken other things our QA did not find. Shoot us a message at staff@ if you notice anything.

...
[ View Full Changelog ]

Polls (

)

Figuring out how to manipulate a flaw to your advantage is at the core of security testing. Different attacks yield different data, but all vectors have their own interesting nuances to exploitation. What is the most fun to exploit?
Answers	Results
Cross site scripting.	0%
SQL injection.	8%
Memory-related bugs.	8%
Race conditions.	0%
People.	8%
Code execution / Command injection	75%

Grab Gear (

)

Support Packet Storm by grabbing gear! Our online store is now open and ready to take your money!

Advertise on Packet Storm (

)

	Get your new product or service noticed on Packet Storm!
Placement on Packet Storm ensures the security community sees your announcement. Advertise where it matters.


Get your new product or service noticed on Packet Storm!
Placement on Packet Storm ensures the security community sees your announcement. Advertise where it matters.

Files (

)

Ksenia Security Lares 4.0 Default Credentials
Posted: 2025-04-01

Ksenia Security Lares 4.0 Open Redirect
Posted: 2025-04-01

Ksenia Security Lares 4.0 Remote Code Execution
Posted: 2025-04-01

Brocade Fabric OS Remote Code Execution / Information Disclosure
Posted: 2025-04-01

Palo Alto Deep Packet Inspection Data Exfiltration
Posted: 2025-04-01

Red Hat Security Advisory 2025-3467-03
Posted: 2025-04-01

Red Hat Security Advisory 2025-3465-03
Posted: 2025-04-01

Ubuntu Security Notice USN-7400-1
Posted: 2025-04-01

Red Hat Security Advisory 2025-3439-03
Posted: 2025-04-01

Ubuntu Security Notice USN-7398-1
Posted: 2025-04-01

News (

)

Apple Backports Zero-Day Patches to Older iPhones and Macs
Posted: 2025-04-01

CISA Spots Spawn of Spawn Malware Targeting Ivanti Flaw
Posted: 2025-04-01

WordPress Attackers Hide Malware in Overlooked Plugins Directory
Posted: 2025-04-01

DOGE Accesses Federal Payroll System and Punishes Employees Who Objected
Posted: 2025-04-01

Critical Auth Bypass Bug in CrushFTP Now Exploited in Attacks
Posted: 2025-04-01

Cyber Attacks to Remain a National Emergency Event in the US
Posted: 2025-04-01

GCHQ Intern Took Top Secret Spy Tool Home, Now Faces Prison
Posted: 2025-04-01

Retail Giant Sam's Club Investigates Clop Ransomware Breach Claims
Posted: 2025-03-31

Kink and LGBT Dating Apps Exposed 1.5m Private User Images Online
Posted: 2025-03-31

OpenAI Offering $100k Bounties for Critical Vulnerabilities
Posted: 2025-03-31