Threat actors have initiated attempts to exploit the CVE-2026-20230 vulnerability within Cisco Unified servers used for corporate telephony. This critical error allows an unauthenticated, remote attacker to force file creation within the operating system....
A recent ransomware investigation by Microsoft yielded an astonishing revelation. Two entirely distinct and unassociated hacking syndicates were operating concurrently within the victim organization’s network. The primary group entrenched itself within the infrastructure, meticulously...
A critical flaw within the File Transfer Protocol (FTP) implementation an antiquated mechanism for transmitting data between computers has resided in the Squid proxy server for nearly 29 years. This severe defect enables unauthorized...
A single corrupted video file can sometimes be dangerous even before execution. The new PixelSmash vulnerability in FFmpeg vividly demonstrates this severe threat. Routine video processing can easily cascade into a complete server crash...
Malware Family: AryStinger Threat Actor: Unknown (Suspected) Victims: Over 4,000 legacy D-Link routers and NAS systems Delivery Vector: Exploitation of older CVEs Key Capabilities: Traffic proxying, distributed scanning, DNS hijacking Source: XLab (Qianxin) Over...
Unpatchable Hardware Vulnerabilities Emerge Even the most robust smartphone security inevitably ages alongside its hardware. Recently, Paradigm Shift vividly demonstrated this reality with the iPhone 11. Surprisingly, this older device still receives the latest...
Cloud machine learning platforms often conceal complex infrastructures behind a few lines of code. Unfortunately, this convenient automation created a dangerous vulnerability within the Google Vertex AI SDK for Python. Specialists from Palo Alto...
An air-gapped network offers no guarantee of safety when adversaries are willing to spend years probing for a way in. Researchers at Sygnia have released the full details of Operation Highland, a campaign in...
An Iran-linked hacking group called Handala has claimed it gained access to data from the FBI’s FPV drones, and the group is now threatening participants in the upcoming World Cup. According to a report...
When a new batch of source code appeared on GitHub, it unexpectedly caught the attention of security researchers. Over the past few days, repositories bearing the name Miasma-Open-Source-Release began appearing across the platform in...
North Korean hackers have launched a sweeping new campaign against software developers. The attackers rely on fake job postings and offers to review someone else’s code. According to Proofpoint, they have already targeted employees...
Google has rolled out an urgent update for Chrome on Windows, macOS, and Linux. In total, the browser receives fixes for 74 vulnerabilities. Crucially, one of these flaws is already being exploited in real-world...
