Microsoft has patched an unprecedented 570 security vulnerabilities in its latest security update cycle, marking the largest single batch in company history. The explosive increase is directly attributed to AI-powered fuzzing and vulnerability discovery tools that are identifying flaws at an acceler
Inc ransomware operators are actively exploiting two zero-day vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances to gain root-level access to enterprise networks. The critical flaws, identified as CVE-2025-23006 and CVE-2025-23007, affect SMA 100 series devices running firmware ver
A cybersecurity professional turned ransomware facilitator has been sentenced to 70 months in federal prison for providing negotiation services to BlackCat/ALPHV ransomware operators. The individual helped threat actors extort victims by acting as an intermediary, translating communications, and coa
Security researchers have discovered a critical 0-click exploit chain targeting Google Pixel 10 devices through a vulnerability in the Video Processing Unit (VPU) driver. The exploit requires no user interaction and can be triggered remotely through specially crafted media files delivered via messag
An EU official responsible for investigating NSO Group’s Pegasus spyware was infected with the very surveillance tool they were tasked with scrutinizing. This brazen attack undermines democratic oversight mechanisms and demonstrates how commercial spyware continues targeting civil society, journalis
The FBI has seized the NetNut proxy service infrastructure, revealing its connection to the massive Popa botnet that compromised hundreds of thousands of devices worldwide. This operation exposes how legitimate-appearing proxy services can be weaponized through malware distribution, transforming uns
A sophisticated AsyncRAT malware campaign is leveraging DLL sideloading techniques alongside legitimate ScreenConnect remote access software to establish persistent, stealthy access to compromised systems. Attackers are exploiting trusted application processes to load malicious DLLs, evading traditi
A sophisticated phishing toolkit named ARToken is actively targeting Microsoft 365 users by exploiting OAuth’s legitimate Device Authorization Flow (Device Code Flow). The panel automates token theft through adversary-in-the-middle attacks, enabling attackers to bypass multi-factor authentication, c
The CitrixBleed vulnerability (CVE-2023-4966) affecting Citrix NetScaler ADC and Gateway appliances has been actively exploited within 24 hours of public disclosure. This critical session hijacking flaw allows unauthenticated attackers to steal valid session tokens and bypass multifactor authenticat
The FortiBleed vulnerability (CVE-2024-23113) is being actively exploited by INC Ransom and Lynx ransomware groups to steal credentials from vulnerable Fortinet devices. This critical authentication bypass flaw affects FortiOS SSL-VPN and allows attackers to extract session tokens and authentication