
WatchGuard SEO Poisoning: Fake Site Harvests VPN Logins Before Serving Legitimate Client
Attackers used a fake download page to harvest VPN login details, then delivered the legitimate client to avoid detection.
The Packet Tribune Threat Desk is the part of the Packet Tribune newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 5 articles so far. See the editorial policy or report an error.

Attackers used a fake download page to harvest VPN login details, then delivered the legitimate client to avoid detection.

Attackers exploited three vulnerabilities in Ivanti VPN appliances to gain root privileges and search for credentials on internal networks.

Canonical confirmed a sustained distributed denial-of-service attack disrupted public websites for over four hours, while core developer services remained operational.

New two-part series shows how to implement post-quantum signatures across AWS services to protect supply chains against future quantum computing threats.

Attackers hijacked three ccTLD registries to obtain fraudulent certificates for Google domains, though Google infrastructure remained secure.