Cisco has confirmed active exploitation of CVE-2026-20245, a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager that allows unauthenticated remote attackers to gain root-level access. The flaw affects multiple Catalyst SD-WAN Manager versions and is being weaponized in the wild before
Nation-state threat actors have successfully infiltrated Australia’s critical infrastructure networks, establishing persistent access designed to enable destructive attacks at strategically opportune moments. The compromise represents a sophisticated pre-positioning campaign where adversaries have e
Google has released Chrome version 149 addressing multiple critical vulnerabilities, including several use-after-free flaws that could enable remote code execution (RCE) attacks. The update patches high-severity issues in core browser components including V8 JavaScript engine, Dawn graphics API, and
Anthropic has publicly accused Chinese tech giant Alibaba of conducting the largest known model distillation attack against its Claude AI systems. The attack allegedly involved systematic queries to extract Claude’s capabilities and replicate them in Alibaba’s Qwen models. This unprecedented accusat
Google has rolled out enhanced privacy controls across Search and Play services, giving users granular control over activity history and personalization settings. The updates include improved deletion tools, simplified privacy dashboards, and new opt-out mechanisms for data collection. While these c
Operation Endgame, a coordinated international law enforcement action, successfully disrupted multiple malware dropper operations that formed the backbone of global cybercrime infrastructure. The operation targeted infrastructure behind IcedID, Trickbot, Pikabot, and other malware families, resultin
Cisco’s SD-WAN vManage software was actively exploited by threat actors for two months before the vendor publicly disclosed the critical vulnerability CVE-2025-20093. The flaw, carrying a CVSS score of 9.1, allows unauthenticated attackers to perform remote code execution. Organizations running affe
A sophisticated backdoor named Mistic has been discovered masquerading as legitimate Microsoft security software to evade detection and maintain persistent access to compromised systems. The malware cleverly mimics the behavior and naming conventions of Microsoft Endpoint Detection and Response (EDR
ShinyHunters, a notorious data extortion group, has exploited zero-day vulnerabilities to breach multiple organizations. Even if you’ve applied recent patches, your systems may have been compromised during the exposure window. Organizations must immediately conduct forensic assessments to determine
A critical use-after-free vulnerability (CVE-2026-50263) has been discovered in the X.Org Server’s CreateSaverWindow function, allowing authenticated local attackers to read sensitive information from freed memory regions. The flaw affects multiple Linux distributions and Unix-like systems still run