A critical path traversal vulnerability in Microsoft Teams for Android allows attackers to access sensitive data from the application’s storage. The flaw, discovered in versions prior to 1416/1.0.0.2024102404, enables malicious actors to read arbitrary files from the app’s private directory, potenti
A critical heap-based buffer overflow vulnerability (ZDI-26-360) has been discovered in the MATE Desktop Atril document viewer that allows remote code execution when processing malicious EPUB files. The flaw exists in the EPUB file parsing functionality and can be triggered by simply opening a speci
A Japanese energy company has reported the loss of a portable storage drive containing personal information of approximately 10.9 million customers. The incident represents one of Japan’s largest data exposure events in the energy sector, raising serious concerns about physical data security practic
Oracle has issued an emergency out-of-band security update addressing a critical zero-day vulnerability in PeopleSoft applications actively exploited by threat actors to steal sensitive organizational data. The flaw, affecting multiple PeopleSoft component versions, allows unauthenticated attackers
NASA’s Deep Space Network (DSN), the critical communications infrastructure supporting deep space missions, experienced significant strain during the Artemis II mission that brought it dangerously close to failure. Despite the near-breaking point, the 60-year-old network ultimately “worked well,” ac
The notorious cybercriminal group ShinyHunters has weaponized a zero-day vulnerability in Oracle PeopleSoft Campus Solutions, launching targeted attacks against educational institutions. The exploit allows unauthorized access to student records, financial data, and administrative systems. Multiple c
The Gentlemen ransomware has emerged as a significant threat, claiming 478 victims worldwide with unique worm-like propagation capabilities. This sophisticated malware combines traditional encryption tactics with self-spreading mechanisms, enabling rapid network infiltration. Organizations face heig
A U.S. court has ruled that Google can be held legally liable for false or misleading information generated by its AI Overviews feature. This precedent-setting decision treats AI-generated content as Google’s own speech rather than merely indexed third-party content, potentially reshaping how search
A Russian national has been formally charged by U.S. authorities for their involvement in the Void Blizzard espionage campaign, a sophisticated cyber operation targeting government entities, critical infrastructure, and defense contractors. The indictment reveals a multi-year campaign leveraging cus
A sophisticated phishing-as-a-service (PhaaS) operation known as SniperDz has been disrupted after a decade of criminal activity. The network provided turnkey phishing kits, infrastructure, and support to cybercriminals worldwide, compromising thousands of victims across multiple continents. Law enf