Cato Networks has unveiled a new attack technique, dubbed HashJack, which conceals malicious AI prompts behind the “#” symbol within legitimate URLs — coercing AI-powered browsers into executing them while remaining invisible to traditional...
A recently patched vulnerability in Microsoft’s Windows Server Update Services has triggered a wave of attacks involving one of the most notable espionage tools of recent years. The incidents underscore how swiftly adversaries move...
An updated patch set for the GRUB2 bootloader has been released publicly, addressing six vulnerabilities at once, most of which stem from accessing memory after it has been freed. Such flaws could potentially allow...
GreyNoise has recorded a dramatic surge in automated requests targeting Palo Alto Networks’ GlobalProtect authentication portals. The scale of this spike is highly atypical: within just 24 hours, the volume of network sessions hitting...
Cl0p struck a blow against Oracle by exploiting a critical zero-day vulnerability in the E-Business Suite. Researchers report that attacks leveraging this flaw have been underway since July 2025, already compromising numerous major organizations...
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that quietly unfolded over the past six months, compromising tens of thousands of devices across the globe....
In recent days it has become apparent that FortiWeb had been accumulating issues the manufacturer chose not to disclose in advance. After Fortinet acknowledged active exploitation of the critical vulnerability CVE-2025-64446 — which allows...
A recently disclosed vulnerability in the 7-Zip archiver is already being weaponized in real-world attacks, according to a statement from NHS England Digital. The notice underscores that the flaw affects a widely used archival...
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo Security team. Researchers found that a group of threat actors has launched a large-scale operation, dubbed...
Google has released new updates for the Chrome browser amid yet another wave of attacks exploiting a flaw in the V8 engine. The company confirmed that one of the vulnerabilities is already being weaponized...
ASUS has released new firmware addressing a critical authentication-bypass vulnerability affecting several DSL-series home routers. Catalogued as CVE-2025-59367, the flaw allows a remote attacker to access the device without any credentials whatsoever. The attack...
WiFi 7, the latest generation of wireless networking, promises breathtaking speeds and far greater stability — yet it also brings an unfamiliar set of technical subtleties. Home routers are shifting to triple-band configurations, and...
