The active exploitation of CVE-2026-20230 in Cisco Unified Communications Manager and Unified CM Session Management Edition highlights the risk posed by internet-reachable enterprise communication platforms.The vulnerability is a server-side request forgery flaw affecting …
The cyberattack on Tata Electronics highlights the growing focus of extortion groups on manufacturing data, product designs, and intellectual property rather than only c…
The OXLOADER campaign demonstrates how attackers are abusing search advertisements to direct users toward convincing fake software-download websites.The attack begins wh…
The compromise of ShapedPlugin’s premium WordPress plugin distribution system demonstrates the serious risks created by software supply-chain attacks.Attackers inserted …
The theft of up to $15 million from the JaredFromSubway Ethereum MEV bot demonstrates how automated trading systems can be manipulated thro…
The WhatsApp phishing campaign using fake business documents shows how attackers are exploiting trust in known contacts rather than relying…
The continued exploitation of SonicWall firewalls shows that installing a firmware update is only one part of remediation. Organizations ma…
AryStinger has compromised at least 4,300 legacy routers, primarily D-Link DIR-850L and DIR-818LW devices, using vulnerabilities dating bac…
The disclosure of the USBLighter8 exploit demonstrates that even the earliest and most trusted stages of a modern device’s boot process can…
The Texas Parks and Wildlife Department data breach demonstrates how a compromise at a third-party service provider can expose millions of …
The active exploitation of an information-disclosure vulnerability in the Gravity SMTP WordPress plugin demonstrates how a flaw that does n…
CISA’s warning that a critical Splunk Enterprise vulnerability is being actively exploited should be treated as an urgent security event, p…
India’s temporary restriction of Telegram over alleged examination-leak and fraud channels highlights the difficult balance between platfor…
The Klue OAuth breach demonstrates how third-party SaaS integrations can become a highly effective route into enterprise cloud data. Instea…
The discovery of a USB-spreading malware campaign targeting cryptocurrency users demonstrates that removable media remains an effective att…