The Department of Homeland Security (DHS) has confirmed a security breach of the Homeland Security Information Network (HSIN), a critical platform used by federal, state, local, and private sector entities to share sensitive information. The breach potentially exposed communications, operational dat
Cybercriminals are exploiting human psychology and Microsoft 365’s OAuth consent mechanisms through sophisticated social engineering attacks dubbed “ConsentFix” and “ClickFix.” These attacks bypass multi-factor authentication (MFA) entirely by tricking users into granting malicious OAuth application
Threat actors are abusing the legitimate VLC Media Player executable to sideload malicious DLL files and deploy ValleyRAT, a sophisticated remote access trojan. By exploiting DLL search order hijacking, attackers use a genuine VLC component (vlc.exe) alongside a weaponized libvlc.dll to establish pe
The advanced persistent threat (APT) actor ToddyCat has deployed a sophisticated new malware variant called Umbrij that exploits OAuth authentication to access Gmail accounts through legitimate Google APIs. This technique allows attackers to bypass traditional email security controls and exfiltrate
India’s Ministry of Electronics and Information Technology (MeitY) has issued a three-day notice to WhatsApp demanding justification for its new username feature rollout. The government cited significant security and privacy concerns, including potential abuse for harassment, scams, and identity the
A critical remote code execution (RCE) vulnerability in WinRAR allows attackers to execute arbitrary code on victim systems simply by tricking users into opening malicious archive files. With over 500 million users worldwide, this flaw poses a massive security risk. WinRAR does not auto-update, requ
JetBrains has disclosed multiple critical vulnerabilities affecting its popular IDE products, including authentication bypass and remote code execution (RCE) flaws. These vulnerabilities impact TeamCity, YouTrack, and other JetBrains server products, potentially allowing attackers to gain unauthoriz
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re
Security researchers have documented the first instance of an AI agent autonomously exploiting a critical remote code execution (RCE) vulnerability in Langflow to deploy database ransomware. The attack demonstrates a paradigm shift where AI systems independently discover vulnerable targets, exploit
Adobe has released emergency security patches addressing multiple critical vulnerabilities in ColdFusion and Campaign Classic, including several maximum-severity CVSS 10.0 rated flaws. The ColdFusion vulnerabilities enable unauthenticated remote code execution (RCE), posing an immediate threat to or