CISA has added multiple critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting these flaws in the wild. The vulnerabilities, carrying maximum CVSS scores, allow unauthenticated remote code execution and comp
CISA’s updated Trusted Internet Connections (TIC) 3.0 guidance now explicitly incorporates Secure Access Service Edge (SASE) architectures as a pathway to modernize federal network security. This guidance enables agencies to transition from legacy perimeter-based security to cloud-native zero trust
Attackers have deployed typosquatted npm packages masquerading as the legitimate PostCSS library, infecting developer workstations with remote access trojans (RATs) and credential stealers. The malicious packages specifically target Chrome browser passwords and establish persistent backdoor access t
A newly disclosed vulnerability in Apple’s macOS operating system enables attackers with limited access to disable critical security tools and escalate privileges to root level. The flaw exploits gaps in macOS’s System Integrity Protection (SIP) mechanisms, allowing malicious actors to terminate sec
Threat actors are weaponizing politically sensitive and forbidden text strings within malware code to exploit AI security systems’ content filtering mechanisms. By embedding phrases related to weapons, terrorism, and restricted topics, attackers cause AI-powered analysis tools to refuse processing t
Threat actors are actively exploiting unpatched Microsoft SharePoint servers to deploy ransomware and custom backdoors across enterprise networks. Multiple attack campaigns targeting known SharePoint vulnerabilities have been observed in the wild, with attackers leveraging these entry points to esta
Microsoft’s Digital Crimes Unit (DCU) successfully dismantled over 200 command-and-control (C2) servers associated with both Amadey bot malware and StealC information stealer in a coordinated legal takedown. This marks the first time a court-authorized operation has simultaneously targeted two disti
A sophisticated backdoor dubbed “Mistic” has been linked to KongTuke, a known ransomware access broker operating in the cybercriminal underground. The malware enables initial access operations by maintaining persistent, stealthy footholds in compromised networks before selling access to ransomware o
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-30179 affecting Ubiquiti UniFi OS and CVE-2014-3026 affecting Lantronix EDS5000 devices. Both flaws are confirmed under active exploi
Governments worldwide are grappling with mounting security risks in open-source software ecosystems. Recent supply chain attacks, underfunded critical projects, and the sheer scale of dependency chains have exposed systemic vulnerabilities that traditional regulatory approaches cannot address. As na