Analog Devices, Inc. (ADI), a leading semiconductor manufacturer with over $12 billion in annual revenue, has disclosed a data breach following unauthorized access to its corporate systems. The company confirmed that threat actors infiltrated its network and exfiltrated sensitive data, though the fu
A sophisticated Russian state-sponsored threat actor has successfully adapted their innovative “half-click” exploit technique to target Microsoft Outlook users after previously compromising Zimbra email platforms. This evolution demonstrates the adversary’s persistence and technical capabilities, en
State-sponsored threat actors are exploiting vulnerabilities in AnySign4PC, a widely-used digital certificate software in South Korea, to deploy backdoors on compromised systems. The attackers leverage legitimate Korean websites that have been previously compromised to deliver malicious payloads wit
Threat actors are exploiting Linux Pluggable Authentication Modules (PAM) to deploy and conceal XMRig cryptocurrency miners on compromised systems. This sophisticated campaign uses modified PAM libraries to establish persistence, evade detection, and maintain unauthorized cryptomining operations. Th
Security researchers have discovered that popular mobile applications eSIM Plus and Nicegram share significant portions of codebase with infrastructure ties to Belarus and Russia. The analysis reveals common backend servers, API endpoints, and development patterns suggesting a coordinated operation
Work Panel has emerged as a sophisticated cybercrime-as-a-service platform that weaponizes social engineering tactics to facilitate large-scale enterprise account takeovers. This unified platform provides criminals with pre-scripted helpdesk impersonation templates, real-time collaboration tools, an
Cisco Firepower Management Center (FMC) has a critical zero-day vulnerability involving static credentials that attackers are actively exploiting in the wild. CISA has added this flaw to its Known Exploited Vulnerabilities catalog, warning that threat actors can leverage hardcoded credentials to gai
Microsoft issued an emergency patch for CVE-2026-42897, a critical zero-day vulnerability in Outlook Web Access (OWA) that threat actor TA488 allegedly exploited in the wild before public disclosure. The flaw allows remote attackers to execute arbitrary code on Exchange servers without authenticatio
A critical vulnerability in Microsoft Word’s Copilot AI assistant enables attackers to embed malicious prompts in documents that self-propagate across systems. These hidden instructions leverage Copilot’s natural language processing to execute unauthorized actions, exfiltrate data, and spread to new
A critical heap overflow vulnerability (CVE-2026-14266) has been discovered in 7-Zip, one of the world’s most popular file compression utilities. The flaw allows attackers to execute arbitrary code on victim systems by crafting malicious archive files. With over 500 million users worldwide, this vul
