Leaked internal training materials reveal how Russia’s GRU military intelligence agency systematically recruits and trains cybersecurity students from prestigious universities, funneling them into notorious hacking units like Sandworm (Unit 74455). The documents expose structured curricula, assessme
The Iranian-linked threat actor Nimbus Manticore is conducting sophisticated social engineering campaigns disguised as job recruitment processes. Targeting software developers and IT professionals, the group delivers cross-platform Remote Access Trojans (RATs) through fake coding assessments. The ma
Nearly 22,000 Microsoft Exchange servers remain vulnerable to a critical authentication bypass flaw that enables complete server takeover. The vulnerability allows attackers to hijack authentication sessions without credentials, granting full administrative access to corporate email infrastructure.
A critical pre-authentication remote code execution vulnerability (CVE-2026-62911, CVSS 9.8) in Microsoft Exchange Server has been publicly disclosed with working proof-of-concept exploit code. The flaw affects Exchange Server 2016, 2019, and some Exchange Server Subscription Edition deployments, al
Chaotic Eclipse, a notorious exploit broker, has publicly released HardBreacher—a zero-day exploit targeting Kaspersky security products. This critical vulnerability enables attackers to bypass kernel-level protections, execute arbitrary code with SYSTEM privileges, and completely neutralize antivir
Chinese APT group Fire Ant has compromised Cisco routers to establish covert data exfiltration channels using GRE tunnels. The attackers exploit legitimate networking protocols to blend malicious traffic with normal operations, making detection extremely challenging. Organizations using Cisco routin
China-linked APT group Fire Ant has been discovered leveraging compromised Cisco routers as covert infrastructure for espionage operations. The group embeds malicious implants directly into network devices, allowing persistent access while blending seamlessly with legitimate traffic. This campaign d
A critical vulnerability in the Cosmos EVM bridge allowed attackers to drain funds from six blockchain networks after Cosmos Labs allegedly knew about the flaw affecting all deployments. The exploit targeted the EVM (Ethereum Virtual Machine) compatibility layer, enabling unauthorized token minting
PaperCut has released a second emergency security patch after researchers discovered bypass techniques that circumvent the initial fix for actively exploited vulnerabilities CVE-2023-27350 and CVE-2023-27351. The flaws allow unauthenticated remote code execution in PaperCut MF and NG print managemen
Two critical vulnerabilities in PaperCut NG/MF print management software can be chained together to achieve unauthenticated remote code execution. The vulnerabilities affect versions prior to 20.1.7, 21.2.11, and 22.0.9, allowing attackers to bypass authentication mechanisms and execute arbitrary co