Chinese state-sponsored threat actor TA4922 is conducting sophisticated espionage operations across the UK and Europe using a previously undocumented malware strain called SilentRunLoader. This custom loader exhibits advanced evasion techniques and serves as a conduit for additional payloads, target
A critical CRLF (Carriage Return Line Feed) injection vulnerability in Laravel’s email handling components allows attackers to inject malicious headers into outbound emails. By exploiting insufficient input sanitization in email address fields, threat actors can manipulate email headers to conduct p
Organizations face a critical blind spot in their security posture: “identity dark matter”—the vast collection of orphaned accounts, shadow identities, and forgotten access permissions that exist beyond traditional IAM visibility. These invisible identities create an exploitable attack surface that
Acer Wave 7 Mesh WiFi routers contain multiple maximum severity (CVSS 10.0) zero-day vulnerabilities that allow unauthenticated remote attackers to execute arbitrary code, bypass authentication, and gain complete control over affected devices. These critical flaws remained unpatched at the time of d
OpenAI has granted UK banking institutions early access to GPT-5.5 capabilities following Anthropic’s decision to exclude financial services from its Glasswing enterprise AI expansion. This strategic divergence highlights competing approaches to AI deployment in high-security sectors, with UK financ
OpenAI has granted UK financial institutions early access to its GPT-5.5 model, positioning itself as the primary AI provider for Britain’s banking sector. This development comes as Anthropic excludes UK banks from its Glasswing enterprise expansion program, creating a competitive divide in enterpri
A Spanish hacker known as “Alcasec,” who styled himself as the “Robin Hood of Spanish Hackers,” has been sentenced to 31 months in prison for stealing and exposing sensitive banking data. Despite claims of acting in the public interest by exposing security vulnerabilities, the court found him guilty
A critical unpatched vulnerability in Windows Search allows attackers to steal NTLMv2 password hashes through specially crafted search URI protocol handlers. By exploiting this flaw, threat actors can force Windows systems to leak authentication credentials to remote servers without user interaction
Researchers have successfully deployed machine learning algorithms to crack medieval ciphers that have stumped cryptographers for centuries. By training neural networks on historical texts and cipher patterns, AI models can now automatically decrypt substitution ciphers, polyalphabetic codes, and ot
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Android and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. Federal agencies must patch these flaws by the mandated deadline, while privat