The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-30179 affecting Ubiquiti UniFi OS and CVE-2014-3026 affecting Lantronix EDS5000 devices. Both flaws are confirmed under active exploi
A sophisticated backdoor dubbed “Mistic” has been linked to KongTuke, a known ransomware access broker operating in the cybercriminal underground. The malware enables initial access operations by maintaining persistent, stealthy footholds in compromised networks before selling access to ransomware o
Governments worldwide are grappling with mounting security risks in open-source software ecosystems. Recent supply chain attacks, underfunded critical projects, and the sheer scale of dependency chains have exposed systemic vulnerabilities that traditional regulatory approaches cannot address. As na
The U.S. Department of Justice has seized a Huione Cloud account linked to a massive cyber scam money laundering network operating across Southeast Asia. The enforcement action targets financial infrastructure used by organized crime syndicates to process proceeds from pig butchering scams, romance
A nationwide outage of the GSM-R (Global System for Mobile Communications – Railway) network brought Germany’s extensive rail system to a standstill, affecting thousands of passengers and highlighting critical single points of failure in modern transportation infrastructure. The incident exposed how
Japanese telecommunications giant KDDI Corporation disclosed a massive data exposure affecting 14.2 million email credentials from its managed email service. The breach resulted from a misconfigured cloud storage bucket that left authentication credentials publicly accessible on the internet. While
The White House has significantly accelerated the timeline for federal agencies to migrate away from quantum-vulnerable cryptographic systems, moving the deadline forward by several years. This urgent directive recognizes the imminent threat posed by quantum computing to current encryption standards
CISA has added a critical Ubiquiti UniFi OS vulnerability (CVE-2025-23093) to its Known Exploited Vulnerabilities catalog after detecting active exploitation in the wild. The flaw, affecting UniFi OS Console versions before 4.1.9, allows unauthenticated remote attackers to execute arbitrary commands
A sophisticated supply chain attack has emerged targeting OpenClaw’s ClawHub Skill Marketplace, where threat actors have been distributing malicious AI agent “skills” designed to exfiltrate sensitive data while evading traditional security controls. The malware leverages AI-specific execution enviro
A critical use-after-free (UAF) vulnerability in Samsung KNOX’s kernel driver (CVE-2026-20971) affects millions of Galaxy devices, enabling local privilege escalation to kernel level. Attackers with ADB or malicious app access can exploit this flaw to bypass KNOX security containers, access encrypte