CISA has added CVE-2026-45247, a critical remote code execution (RCE) vulnerability in Adobe Magento, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited in the wild, allowing attackers to execute arbitrary code on vulnerable e-commerce platforms. Federal agenc
Acer is actively working to patch a critical zero-day vulnerability affecting its Wave 7 mesh router series. The flaw, which has been exploited in the wild before a patch became available, allows attackers to compromise router security and potentially gain unauthorized access to network traffic. Use
The U.S. Department of Justice has taken decisive action against cryptocurrency fraud networks operating across Southeast Asia, successfully freezing $3.8 million in digital assets. These operations, often running from compounds in Cambodia, Laos, and Myanmar, have been targeting American victims th
Europol coordinated a major international law enforcement operation resulting in 29 arrests and the dismantling of nine organized crime groups running illegal streaming services. The operation targeted IPTV platforms generating millions in illicit revenue while distributing copyrighted content to hu
Microsoft has introduced native Unix coreutils to Windows, marking a significant shift in the operating system’s architecture. While this integration enhances developer productivity and cross-platform compatibility, it introduces new attack surfaces, permission model complexities, and potential secu
Researchers have demonstrated that freely available open-source AI models can autonomously design and build self-propagating computer worms without requiring sophisticated tools like proprietary AI systems or zero-day exploits. This development marks a significant shift in the threat landscape, lowe
Organizations worldwide are inadvertently storing user passwords in plain text within Active Directory (AD) description fields, creating a critical security vulnerability. This widespread practice bypasses password hashing mechanisms and grants unauthorized access to anyone with basic AD read permis
Global web traffic has reached a historic tipping point: automated bots now generate more traffic than human users for the first time ever. Recent data reveals that bot traffic accounts for 52-55% of all internet activity, with malicious bots representing a significant portion of this automated traf
Commvault warns organizations that traditional backup strategies are failing against AI-enhanced attacks that leave systems in a “dark, dead” state. Modern threat actors leverage artificial intelligence to identify and destroy backup systems before deploying ransomware, rendering recovery impossible
Microsoft has announced Scout, an always-on AI agent designed to integrate deeply with Microsoft 365 applications including Teams, Outlook, and other productivity tools. While promising enhanced productivity through continuous monitoring and intelligent assistance, Scout introduces significant secur