Five critical zero-day vulnerabilities in OpenClaw, a popular AI agent orchestration framework, allow attackers to hijack legitimate AI agent sessions, execute arbitrary code, and manipulate agent behaviors. The flaws affect authentication mechanisms, input validation, and session management, enabli
A security researcher has publicly released proof-of-concept exploits for multiple Microsoft vulnerabilities, bypassing responsible disclosure protocols in protest of the company’s vulnerability handling practices. The leaked exploits target Windows components and could enable attackers to escalate
Russia’s Federal Security Service (FSB) has publicly accused foreign intelligence agencies of orchestrating a sophisticated mobile malware campaign targeting Russian government officials’ iPhones. The FSB claims thousands of devices from domestic users and foreign diplomatic missions were compromise
A financial institution operated with untested security controls for nearly a year, exposing critical banking infrastructure to potential exploitation. The incident highlights systemic failures in vulnerability management programs, where security testing gaps created an unknown risk exposure window.
Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac
A critical vulnerability (CVE-2025-22031) in Apache ActiveMQ allows attackers to inject malicious security headers, potentially leading to authentication bypass and unauthorized access. The flaw affects versions prior to 6.1.4 and 5.18.7, with proof-of-concept exploits already circulating. Organizat
Chinese state-sponsored threat actor TA4922 is conducting sophisticated espionage operations across the UK and Europe using a previously undocumented malware strain called SilentRunLoader. This custom loader exhibits advanced evasion techniques and serves as a conduit for additional payloads, target
A critical CRLF (Carriage Return Line Feed) injection vulnerability in Laravel’s email handling components allows attackers to inject malicious headers into outbound emails. By exploiting insufficient input sanitization in email address fields, threat actors can manipulate email headers to conduct p
Organizations face a critical blind spot in their security posture: “identity dark matter”—the vast collection of orphaned accounts, shadow identities, and forgotten access permissions that exist beyond traditional IAM visibility. These invisible identities create an exploitable attack surface that
Acer Wave 7 Mesh WiFi routers contain multiple maximum severity (CVSS 10.0) zero-day vulnerabilities that allow unauthenticated remote attackers to execute arbitrary code, bypass authentication, and gain complete control over affected devices. These critical flaws remained unpatched at the time of d