InfoSecBulletin Cybersecurity for mankind

SonicWall warned on Monday that unknown attackers have trojanized its SSL-VPN NetExtender application, tricking users into downloading it from fake sites. SonicWall NetExtender is an SSL‑VPN client used by companies to give remote employees secure access to their internal networks. SonicWall does not mention how prospective victims were lured to the …

A significant security vulnerability has been revealed in TeamViewer Remote Management for Windows, posing a risk of privilege escalation attacks. The CVE-2025-36537 vulnerability allows unprivileged local attackers to delete any files with SYSTEM-level authority, putting organizations using TeamViewer’s Remote Management at significant risk. Vulnerability Overview: The vulnerability, assigned a CVSS …

Unidentified hackers are targeting exposed Microsoft Exchange servers to inject harmful code into login pages and steal credentials. Positive Technologies published an analysis last week revealing two types of JavaScript keylogger code on the Outlook login page. Those that save collected data to a local file accessible over the internet …