Security researchers have identified a critical weakness in production RSA keys containing an abnormally high number of zero blocks in their prime factors. These mathematically deficient keys can be factored significantly faster than properly generated keys, potentially exposing encrypted communicat
Dell has disclosed critical remote code execution (RCE) vulnerabilities in Wyse Management Suite versions prior to 5.5 HF1, affecting enterprise thin client deployments worldwide. Multiple vulnerabilities enable unauthenticated attackers to execute arbitrary code remotely, potentially compromising e
The U.S. State Department has announced a combined $10 million reward for information leading to the identification or location of members from two Russian hacking groups—UNC5792 and UNC4221—who have been actively targeting users of encrypted messaging platforms including WhatsApp and Signal. These
Security researchers have uncovered a massive campaign exploiting the DCloud Uni-App framework, with over 236,000 malicious sites actively conducting cryptocurrency scams, phishing attacks, and wallet draining operations. The Uni-App platform, a legitimate Chinese cross-platform development framewor
Israeli cybersecurity training and simulation company Cyberbit has shut down its operations in Israel, laying off its local workforce while pivoting to focus exclusively on the United States market. The company, known for its cyber range training platforms and SOC simulation products, will continue
Oracle E-Business Suite faces active exploitation of CVE-2024-46817, a critical vulnerability allowing unauthenticated remote code execution. Attackers are leveraging this flaw to compromise enterprise systems, with proof-of-concept exploits circulating in underground forums. Organizations running O
Russia-linked APT group Turla has been observed deploying a previously undocumented backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. The sophisticated campaign leverages compromised infrastructure to establish persistent access, with the malware demonstrating ad
Microsoft has announced the extension of hotpatching support for Windows Server 2022 on Azure through 2027, providing organizations with continuous security updates that don’t require system reboots. This extension ensures businesses can maintain operational continuity while staying protected agains
The U.S. Department of Justice has seized over 400 domains allegedly used to illegally stream FIFA World Cup content, marking one of the largest anti-piracy enforcement actions in recent years. This coordinated operation targeted websites providing unauthorized access to premium sports content, high
Millenium RAT, a sophisticated remote access trojan rewritten in C++, has compromised over 62,000 devices across 160 countries in an accelerating global campaign. The malware features advanced persistence mechanisms, credential harvesting capabilities, and keylogging functionality. Attackers are dis
