A new remote access trojan dubbed ChocoPoC is actively targeting vulnerability researchers through weaponized GitHub repositories disguised as proof-of-concept (PoC) exploit code. Attackers create convincing fake exploit repos for recent CVEs, tricking security professionals into downloading and exe
Medical device giant Medtronic has confirmed a data breach orchestrated by the notorious cybercriminal group ShinyHunters, resulting in unauthorized access to customer information. The incident affects an undisclosed number of individuals whose personal data was stored in Medtronic’s systems. ShinyH
A critical vulnerability dubbed “FortiBleed” is actively being exploited by INC and Lynx ransomware groups to steal credentials from Fortinet firewall systems. Over 430,000 FortiGate SSL VPN devices remain exposed, allowing threat actors to extract plaintext passwords without authentication. Organiz
EvilTokens, a sophisticated Business Email Compromise (BEC) phishing kit leveraging OAuth device code authentication flows, has evolved into a comprehensive attack platform capable of bypassing multi-factor authentication (MFA) and maintaining persistent access to enterprise accounts. Recent analysi
Oracle E-Business Suite (EBS) is facing active exploitation of CVE-2026-46817, a critical unauthenticated remote code execution vulnerability affecting multiple versions. Security researchers have identified approximately 950 internet-facing systems vulnerable to attack, with threat actors already l
Organizations deploying AI systems without robust governance frameworks face escalating regulatory penalties, operational risks, and reputational damage. With the EU AI Act, US executive orders, and industry-specific regulations creating a complex compliance landscape, enterprises must implement com
A critical vulnerability in Argo CD’s repo-server component enables authenticated attackers to execute arbitrary code and potentially compromise entire Kubernetes clusters. The flaw, stemming from improper input validation in manifest generation processes, affects multiple Argo CD versions and remai
The Department of Homeland Security (DHS) has confirmed a security breach of the Homeland Security Information Network (HSIN), a critical platform used by federal, state, local, tribal, and territorial partners to share sensitive law enforcement and threat intelligence information. The compromise ex
A malicious browser extension masquerading as “Google Notes” has been discovered intercepting cryptocurrency transactions by automatically replacing wallet addresses copied to the clipboard. The fake extension, distributed through unofficial channels and potentially compromised websites, monitors cl
Security researchers have discovered critical remote code execution (RCE) vulnerabilities in Cursor IDE, a popular AI-powered code editor. These flaws enable attackers to execute arbitrary code through zero-click prompt injection attacks, potentially compromising developer workstations without any u