A critical privilege escalation vulnerability (CVE-2024-20272) in Cisco Unified Communications Manager (CUCM) has been weaponized by threat actors in less than 24 hours after public disclosure. The flaw allows authenticated attackers to escalate privileges to root level, granting complete system con
Tata Electronics, a key supplier for tech giants Apple and Tesla, has confirmed a significant data breach after threat actors claimed to have exfiltrated 630GB of sensitive corporate data. The leak allegedly contains proprietary manufacturing information, employee records, and confidential business
The Federal Communications Commission (FCC) has enacted comprehensive cybersecurity regulations targeting emergency alert systems and undersea cable infrastructure. These rules establish mandatory security protocols, vulnerability reporting requirements, and enhanced protection measures for systems
Threat actors are abusing Shopify’s legitimate Shop app—a popular order-tracking platform—to deliver callback phishing attacks that bypass traditional email security controls. By exploiting the app’s notification system, attackers send authentic-looking messages from Shopify’s infrastructure, tricki
Cybercriminals are exploiting the massive hype around Grand Theft Auto 6 (GTA 6) by creating fraudulent websites claiming to offer early access, beta keys, and exclusive content. These malicious sites distribute information-stealing malware, cryptocurrency draining scripts, and phishing schemes. Thr
Mistic, a newly discovered backdoor, is being deployed in ransomware intrusion chains as a persistent access mechanism. This sophisticated malware combines advanced evasion techniques, encrypted command-and-control (C2) communications, and modular capabilities to maintain long-term access to comprom
Russian authorities continue using Cellebrite’s mobile forensic tools to extract data from activists’ devices despite the Israeli company’s contract termination. A recent case involving a human rights activist demonstrates that Russia’s existing stockpile of Cellebrite equipment remains operational,
A popular Chrome browser extension with over 10 million installations has been discovered containing dormant code injection capabilities that could execute arbitrary scripts on user browsers. The ad blocker, which appears legitimate on the surface, includes obfuscated functions that allow remote cod
A critical vulnerability lurking in cURL for 25 years has finally been patched, affecting an estimated 30 billion devices worldwide. This long-standing flaw impacted one of the most widely deployed software libraries in existence, embedded in everything from smartphones and IoT devices to enterprise
A sophisticated Adversary-in-the-Middle (AiTM) phishing kit targeting AWS Management Console users has been discovered in active campaigns. The kit intercepts authentication sessions in real time, capturing usernames, passwords, and multi-factor authentication (MFA) codes to hijack AWS accounts even