Microsoft has introduced a bot verification system for Teams meetings that acts as an authentication gatekeeper, requiring bots to present valid credentials before joining calls. This new access control mechanism addresses the growing security concern of unauthorized bots infiltrating corporate meet
Oracle E-Business Suite (EBS) is under active attack through CVE-2026-46817, a critical authentication bypass vulnerability with a CVSS score of 9.8. Attackers are exploiting unpatched instances to gain unauthorized administrative access, potentially compromising sensitive financial and business dat
A critical zero-day vulnerability in Oracle PeopleSoft (CVE-2026-35273) has been actively exploited in the wild, resulting in a confirmed data breach at Nissan. The unauthenticated remote code execution flaw affects PeopleSoft versions 9.2 and earlier, allowing attackers to bypass authentication and
The U.S. State Department has announced a $10 million bounty for information leading to the identification or location of members of two Russian cyber espionage groups, UNC5792 and UNC4221. These threat actors have conducted sophisticated campaigns targeting messaging applications and critical infra
The Djinn infostealer campaign is actively exploiting CVE-2024-48558, a critical path traversal vulnerability in SimpleHelp remote support software, to deploy sophisticated credential-harvesting malware. This operation specifically targets cloud service credentials, AI platform tokens, and enterpris
Nissan Motor Corporation disclosed a significant data breach affecting employee information after threat actors exploited a zero-day vulnerability in Oracle PeopleSoft. The automotive giant confirmed that unauthorized access occurred through their HR management system, compromising sensitive employe
CISA has added CVE-2024-48558, a critical path traversal vulnerability in SimpleHelp remote desktop software, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw allows unauthenticated attackers to achieve remote code execution on affected servers. With active exploitation confirmed in th
A counterfeit Perplexity AI Chrome extension was discovered intercepting user search queries and address bar inputs, redirecting traffic through attacker-controlled domains. The malicious extension mimicked the legitimate Perplexity AI service, exploiting user trust to harvest browsing data and pote
A critical security vulnerability in Amazon’s Q AI coding assistant for Visual Studio Code could allow attackers to steal AWS credentials through malicious code suggestions. The flaw enables credential exfiltration when developers accept and execute compromised code snippets generated by the AI assi
WhatsApp has introduced a username feature that allows users to connect without sharing their phone numbers. This privacy-focused update enables users to create unique identifiers for initiating conversations while keeping their actual phone numbers hidden from contacts. The feature addresses longst
