Google has rolled out enhanced privacy controls across Search and Play services, giving users granular control over activity history and personalization settings. The updates include improved deletion tools, simplified privacy dashboards, and new opt-out mechanisms for data collection. While these c
Operation Endgame, a coordinated international law enforcement action, successfully disrupted multiple malware dropper operations that formed the backbone of global cybercrime infrastructure. The operation targeted infrastructure behind IcedID, Trickbot, Pikabot, and other malware families, resultin
Cisco’s SD-WAN vManage software was actively exploited by threat actors for two months before the vendor publicly disclosed the critical vulnerability CVE-2025-20093. The flaw, carrying a CVSS score of 9.1, allows unauthenticated attackers to perform remote code execution. Organizations running affe
A sophisticated backdoor named Mistic has been discovered masquerading as legitimate Microsoft security software to evade detection and maintain persistent access to compromised systems. The malware cleverly mimics the behavior and naming conventions of Microsoft Endpoint Detection and Response (EDR
ShinyHunters, a notorious data extortion group, has exploited zero-day vulnerabilities to breach multiple organizations. Even if you’ve applied recent patches, your systems may have been compromised during the exposure window. Organizations must immediately conduct forensic assessments to determine
A critical use-after-free vulnerability (CVE-2026-50263) has been discovered in the X.Org Server’s CreateSaverWindow function, allowing authenticated local attackers to read sensitive information from freed memory regions. The flaw affects multiple Linux distributions and Unix-like systems still run
Microsoft has significantly evolved its Cloud-Native Application Protection Platform (CNAPP) capabilities, aligning with industry-leading cloud security solutions. The enhancement consolidates multiple security tools into a unified platform, offering comprehensive visibility, risk assessment, and th
A critical zero-day vulnerability in Cisco systems is being actively exploited by malicious threat actors who have successfully gained the highest level of administrative access at a communications service provider. The exploitation has granted attackers complete control over critical network infras
CISA has added CVE-2025-67038 to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation of a critical authentication bypass vulnerability in Lantronix EDS5000 terminal servers. The flaw allows unauthenticated attackers to gain administrative access remotely, posing severe
A sophisticated phishing campaign dubbed “EvilTokens” is leveraging client-side DOM manipulation and JavaScript encryption to evade traditional static analysis tools. By deferring malicious code execution until runtime within the victim’s browser, attackers successfully bypass email security gateway