CISA has added a critical Ubiquiti UniFi OS vulnerability (CVE-2025-23093) to its Known Exploited Vulnerabilities catalog after detecting active exploitation in the wild. The flaw, affecting UniFi OS Console versions before 4.1.9, allows unauthenticated remote attackers to execute arbitrary commands
A sophisticated supply chain attack has emerged targeting OpenClaw’s ClawHub Skill Marketplace, where threat actors have been distributing malicious AI agent “skills” designed to exfiltrate sensitive data while evading traditional security controls. The malware leverages AI-specific execution enviro
A critical use-after-free (UAF) vulnerability in Samsung KNOX’s kernel driver (CVE-2026-20971) affects millions of Galaxy devices, enabling local privilege escalation to kernel level. Attackers with ADB or malicious app access can exploit this flaw to bypass KNOX security containers, access encrypte
The Internet Society Foundation has launched the Common Good Cyber Fund, a $1 million grant program aimed at strengthening cybersecurity infrastructure and capacity in underserved regions worldwide. The initiative will support projects focused on defensive security, capacity building, and resilience
The Dropping Elephant threat actor group has evolved its tactics by abusing Windows’ legitimate GoogleErrorReport scheduled task to maintain persistent access on compromised systems. This sophisticated evasion technique allows the attackers to blend malicious activity with normal system processes, m
North Korean threat actors have deployed macOS.Gaslight, a sophisticated Rust-based backdoor that employs an unprecedented defensive mechanism: weaponized prompt injection attacks targeting security analysts using AI-powered analysis tools. Rather than escaping sandboxes through prompt manipulation,
Cisco has confirmed active exploitation of CVE-2026-20230, a critical Server-Side Request Forgery (SSRF) vulnerability in Cisco Unified Communications Manager (Unified CM). The flaw allows unauthenticated attackers to perform arbitrary HTTP requests through vulnerable systems, potentially leading to
A sophisticated threat campaign dubbed “FortiBleed” has compromised approximately 430,000 FortiGate firewall devices worldwide, resulting in the exfiltration of over 110 million credentials. Attackers exploited previously disclosed vulnerabilities in Fortinet’s SSL-VPN implementation to harvest auth
Security researcher Mythos has uncovered “Squidbleed,” a critical memory leak vulnerability affecting Squid proxy servers that has remained undetected for nearly three decades. This flaw, present since the Clinton administration, allows remote attackers to extract sensitive information from server m
A critical memory disclosure vulnerability dubbed “Squidbleed” has been discovered in Squid proxy caching server, affecting versions dating back to the 1990s. The flaw (CVE-2024-23638) allows unauthenticated remote attackers to leak sensitive memory contents through malformed HTTP requests. With Squ
