Security News & Blog

The Cl0p-linked targeting of internet-exposed PTC Windchill and FlexPLM systems highlights the growing risk around enterprise product lifecycle management platforms.PTC Windchill and FlexPLM are not ordinary web applica…

The active exploitation of the Fastjson 1.x remote code execution vulnerability highlights the serious risk created when widely used application libraries process untrusted data unsafely.Fastjson is Alibaba’s JSON libra…

The ShinyHunters-linked sextortion scam shows how stolen breach data can be reused long after the original incident to frighten victims into paying criminals.In this campaign, scammers are sending sextortion emails that…

The campaign using JavaScript to build malware in browser memory highlights a dangerous shift in web-based malware delivery.Traditionally, many malware campaigns worked in a simple way: lure the user to a fake website, …

The Chick-fil-A data breach is another reminder that credential stuffing remains one of the most common and effective ways attackers compromise customer accounts.The incident involved automated login attempts against Ch…

The Certighost exploit highlights one of the most dangerous areas in enterprise identity security: Active Directory Certificate Services.Active Directory is already the control plane for most Windows enterprise environm…

The OnTrac data breach highlights the growing risk around logistics and delivery companies, where customer data can become highly valuable for fraud, phishing, and targeted social engineering.OnTrac is a major U.S. parc…

The hotel Wi-Fi DNS hijacking campaign highlights a serious risk for business travelers: the network you connect to can become part of the phishing attack.Attackers are reportedly compromising Wi-Fi infrastructure at ho…

The Claude Cowork flaw highlights a serious and growing security issue around AI agents: once an agent can execute code, access files, connect to tools, and work across environments, its sandbox becomes a security bound…

The abuse of Notepad++ plugins to install malware highlights how attackers are increasingly hiding inside trusted software workflows instead of relying only on obvious malicious executables.Notepad++ is a widely used te…

The Russian espionage campaign exploiting a Zimbra zero-day highlights how dangerous email-platform vulnerabilities can become when they are used for intelligence collection.The flaw, tracked as CVE-2025-66376, affected…

The fake Claude app campaign promoted through Bing ads highlights how attackers are abusing trust in both popular AI brands and search-engine advertising.Victims searching for a Claude desktop app were shown sponsored s…