A critical authentication bypass vulnerability in SimpleHelp remote support software has left nearly 14,000 publicly accessible servers exposed to potential compromise. The flaw allows unauthenticated attackers to gain unauthorized access to remote desktop sessions, potentially exposing sensitive co
Chinese state-sponsored threat actors have developed a sophisticated email exfiltration technique that abuses legitimate Google Workspace email forwarding rules. The campaign targeted defense contractors and research institutions, automatically forwarding sensitive emails to attacker-controlled acco
The Department of Justice has seized two prominent deepfake pornography websites, CFAKE and SOCFAKE, marking the first major enforcement action under the TAKE IT DOWN Act. These platforms enabled users to create non-consensual intimate imagery using AI technology, affecting thousands of victims glob
Cisco SD-WAN infrastructure is under active attack from a critical zero-day vulnerability that grants attackers root-level access to vulnerable systems. The flaw, affecting multiple SD-WAN components, is being actively exploited in the wild before patches are available. Organizations running Cisco S
Security researchers have uncovered a sophisticated criminal operation behind EtherRAT malware, revealing an extensive infrastructure spanning multiple domains, phishing pages, and distribution channels. The network facilitated credential theft, financial fraud, and unauthorized system access across
Security researchers discovered that AI coding assistants can be tricked into generating malicious code through seemingly innocent “fix this code” prompts—no sophisticated jailbreaking required. The vulnerability, demonstrated with a system dubbed “Fable 5,” raised concerns among federal authorities
A critical vulnerability dubbed “SearchLeak” has been discovered in Microsoft’s Copilot AI assistant that allows attackers to exfiltrate sensitive data through a single-click exploit. By manipulating Copilot’s search integration features, malicious actors can craft prompts that extract confidential
North Korean state-sponsored threat actors are exploiting the trust developers place in their development tools by weaponizing legitimate software packages and IDE extensions. These campaigns transform everyday coding utilities into malware delivery mechanisms, targeting software developers globally
The UK government is proposing legislation to ban social media access for children under 16, potentially including enforced overnight curfews on platform usage. This regulatory shift represents one of the most aggressive approaches to youth digital safety globally, raising critical questions about a
A critical vulnerability in SimpleHelp remote support software allows unauthenticated attackers to create rogue administrator accounts, potentially granting complete control over remote support infrastructure. The flaw affects versions prior to 5.5.6 and has been assigned CVE-2024-57726 with a CVSS