CISA has added a new critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. Federal agencies have 21 days to apply patches or discontinue use of affected products. The addition signals immediate threat to organizations using the vulne
Cybercriminals are launching sophisticated phishing campaigns using fraudulent purchase orders to distribute JS.MonoGlyphRAT, a JavaScript-based remote access trojan (RAT). The malware targets US enterprises through convincing business email compromise tactics, establishing persistent backdoor acces
Five critical zero-day vulnerabilities in OpenClaw, a popular AI agent orchestration framework, allow attackers to hijack legitimate AI agent sessions, execute arbitrary code, and manipulate agent behaviors. The flaws affect authentication mechanisms, input validation, and session management, enabli
A security researcher has publicly released proof-of-concept exploits for multiple Microsoft vulnerabilities, bypassing responsible disclosure protocols in protest of the company’s vulnerability handling practices. The leaked exploits target Windows components and could enable attackers to escalate
Russia’s Federal Security Service (FSB) has publicly accused foreign intelligence agencies of orchestrating a sophisticated mobile malware campaign targeting Russian government officials’ iPhones. The FSB claims thousands of devices from domestic users and foreign diplomatic missions were compromise
A financial institution operated with untested security controls for nearly a year, exposing critical banking infrastructure to potential exploitation. The incident highlights systemic failures in vulnerability management programs, where security testing gaps created an unknown risk exposure window.
Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac
A critical vulnerability (CVE-2025-22031) in Apache ActiveMQ allows attackers to inject malicious security headers, potentially leading to authentication bypass and unauthorized access. The flaw affects versions prior to 6.1.4 and 5.18.7, with proof-of-concept exploits already circulating. Organizat
Chinese state-sponsored threat actor TA4922 is conducting sophisticated espionage operations across the UK and Europe using a previously undocumented malware strain called SilentRunLoader. This custom loader exhibits advanced evasion techniques and serves as a conduit for additional payloads, target
A critical CRLF (Carriage Return Line Feed) injection vulnerability in Laravel’s email handling components allows attackers to inject malicious headers into outbound emails. By exploiting insufficient input sanitization in email address fields, threat actors can manipulate email headers to conduct p