ACTIVE THREATS: File servers are here to stay. Heres how to manage them securely • Chinese Fire Ant hackers turn Cisco routers into spying platforms • Microsoft asks users to ignore 'Antivirus is turned off' errors • Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets • ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions ACTIVE THREATS: File servers are here to stay. Heres how to manage them securely • Chinese Fire Ant hackers turn Cisco routers into spying platforms • Microsoft asks users to ignore 'Antivirus is turned off' errors • Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets • ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
Latest cybersecurity vulnerabilities news, analysis, and intelligence.
Law enforcement sinkholed 45,000 IP addresses and seized servers in Operation Synergia III, one of the largest cybercrime infrastructure takedowns on record. The coordinated global operation redirects malicious traffic to law enforcement-controlled systems to identify victims and gather forensic evi
Microsoft is investigating widespread synchronization failures in classic Outlook affecting enterprises. Beyond productivity disruption, users may resort to unauthorized workarounds that could compromise system security. (164 characters, 2 sentences)
Law enforcement dismantled SocksEscort, a botnet controlling 369,000 residential routers across 163 countries used to anonymize criminal fraud schemes. Attackers exploited the compromised home devices as proxy exit nodes, making illicit traffic appear to originate from legitimate ISP customers.
Nine "CrackArmor" vulnerabilities in Linux AppArmor allow unprivileged users to escalate to root and escape containers by exploiting confused deputy flaws in the access control system, threatening cloud infrastructure and containerized workloads.
Google patched two actively exploited Chrome zero-days: Skia graphics flaw (CVE-2026-3909, CVSS 8.8) enabling arbitrary code execution and a V8 JavaScript sandbox escape. Both require minimal user interaction—simply visiting a malicious website can trigger the vulnerabilities.
Google released emergency patches for two Chrome zero-days already being exploited in real-world attacks. These remotely-triggerable browser vulnerabilities pose an immediate critical threat, requiring users to update immediately to avoid compromise through malicious websites.
Google paid $17.1M to 747 researchers in 2025 for vulnerability reports, showing how tech companies depend on external security expertise. Bug bounties are now essential to modern defense.
Veeam patched critical RCE flaws in Backup & Replication. These systems are prime targets due to broad network access and admin privileges, yet receive less security scrutiny than perimeter defenses.
CISA added a critical n8n remote code execution vulnerability (CVE-2025-68613, CVSS 9.9) to its Known Exploited Vulnerabilities catalog, confirming active exploitation. Approximately 24,700 publicly exposed instances are at risk from unauthenticated attackers executing arbitrary code.
Apple patched a WebKit flaw (CVE-2023-43010) being actively exploited by the Coruna exploit kit on older iOS and macOS devices. The memory corruption vulnerability highlights attackers' strategy of targeting unpatched legacy systems where adoption lags.
The question is becoming unavoidable: You knew this vulnerability existed. You had the tools and resources to fix it. Why didn't you?
CISA mandates urgent patching of a critical RCE vulnerability in n8n being actively exploited. The flaw threatens federal agencies and organizations using the workflow automation platform.
Critical SQL injection in Elementor Ally exposes 250,000+ WordPress sites. Unauthenticated attackers can query databases and steal sensitive data without admin access.
WhatsApp launches parent-managed accounts for pre-teens, giving parents control over contacts, groups, and messaging. The customizable approach lets families set individualized safety guardrails.
Meta disabled 150,000 fraudulent accounts in a 11-nation crackdown on Southeast Asian scam rings. They ran romance and investment fraud schemes affecting hundreds of thousands worldwide.
Researchers successfully manipulated Perplexity's Comet into executing phishing attacks in minutes, exposing critical flaws in autonomous AI browsers that make independent decisions online. The vulnerability threatens the widespread adoption of agentic AI tools in enterprise and consumer markets.
PhantomRaven deployed 88 malicious npm packages via typosquatting to harvest SSH keys and API credentials. Installation triggers scripts that steal secrets from developer environments.
Critical n8n flaws (CVSS 9.4) allow unauthenticated code execution and credential theft. Automation platforms pose high risk due to their broad permissions and access to sensitive business data across integrated systems.
Five malicious Rust packages masquerading as time utilities harvest credentials from .env files during CI/CD builds on crates.io, exploiting developer workflows to exfiltrate API keys and secrets at execution time.
Microsoft patched 84 vulnerabilities in March, including two zero-days already being exploited by attackers. The critical-severity flaws span Windows, Office, and other products, demanding immediate deployment priority.
Microsoft's March Patch Tuesday addresses 79 vulnerabilities, including two publicly disclosed zero-days, forcing urgent remediation amid a compressed defense timeline. This update underscores the accelerating threat landscape where organizations must balance patch deployment speed against productio
Microsoft patched two zero-days in Windows 10 via KB5078885 and a shutdown bug. Millions of organizations still run the aging OS despite Windows 11 availability, creating ongoing security maintenance challenges for enterprise defenders.
Russian-speaking threat actors are deploying BlackSanta, an EDR killer, to target HR departments. The year-long campaign shows attackers prioritizing defense removal over stealth.
Google patched CVE-2025-0971, a critical V8 type confusion bug actively exploited against Chrome users. Just visiting a compromised website enables remote code execution—update now. *(178 characters)*
Seven critical vulnerabilities in ThreadX OS affect 12 billion embedded devices in medical, aerospace, and industrial systems. The worst flaw enables unauthenticated remote code execution.