Cisco has disclosed a critical vulnerability (CVE-2024-20272) in Unified Communications Manager (UCM) that allows authenticated attackers to execute arbitrary SQL commands on affected systems. With a CVSS score of 8.8, the flaw affects multiple UCM versions and has been accompanied by public proof-o
Cybercriminals are orchestrating a targeted phishing campaign against Chrome extension developers, sending fraudulent copyright infringement notices that impersonate the Chrome Web Store. These convincing emails trick developers into clicking malicious links that lead to credential-harvesting pages
CISA has added CVE-2026-45247, a critical remote code execution (RCE) vulnerability in Adobe Magento, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited in the wild, allowing attackers to execute arbitrary code on vulnerable e-commerce platforms. Federal agenc
Acer is actively working to patch a critical zero-day vulnerability affecting its Wave 7 mesh router series. The flaw, which has been exploited in the wild before a patch became available, allows attackers to compromise router security and potentially gain unauthorized access to network traffic. Use
The U.S. Department of Justice has taken decisive action against cryptocurrency fraud networks operating across Southeast Asia, successfully freezing $3.8 million in digital assets. These operations, often running from compounds in Cambodia, Laos, and Myanmar, have been targeting American victims th
Europol coordinated a major international law enforcement operation resulting in 29 arrests and the dismantling of nine organized crime groups running illegal streaming services. The operation targeted IPTV platforms generating millions in illicit revenue while distributing copyrighted content to hu
Microsoft has introduced native Unix coreutils to Windows, marking a significant shift in the operating system’s architecture. While this integration enhances developer productivity and cross-platform compatibility, it introduces new attack surfaces, permission model complexities, and potential secu
Researchers have demonstrated that freely available open-source AI models can autonomously design and build self-propagating computer worms without requiring sophisticated tools like proprietary AI systems or zero-day exploits. This development marks a significant shift in the threat landscape, lowe
Organizations worldwide are inadvertently storing user passwords in plain text within Active Directory (AD) description fields, creating a critical security vulnerability. This widespread practice bypasses password hashing mechanisms and grants unauthorized access to anyone with basic AD read permis
Global web traffic has reached a historic tipping point: automated bots now generate more traffic than human users for the first time ever. Recent data reveals that bot traffic accounts for 52-55% of all internet activity, with malicious bots representing a significant portion of this automated traf