The FBI has successfully disrupted the QTFY hacking infrastructure, a sophisticated Chinese state-sponsored operation targeting U.S. critical infrastructure and government networks. The operation involved seizing command-and-control servers and disrupting malicious implants across compromised system
Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm
A critical remote code execution (RCE) vulnerability in Elementor Pro, one of WordPress’s most popular page builders with over 12 million installations, allows authenticated attackers to execute arbitrary PHP code on vulnerable sites. The flaw, tracked as CVE-2023-32243, affects Elementor Pro versio
The United States Department of Justice has indicted 17 Iranian nationals for orchestrating a sophisticated, multi-year cyber espionage campaign targeting critical infrastructure, government agencies, and private sector organizations across multiple countries. The operation compromised thousands of
Security researchers have identified 15 malicious Firefox browser extensions that exploited Cloudflare Workers to exfiltrate sensitive cryptocurrency wallet data from unsuspecting users. These extensions masqueraded as legitimate productivity and utility tools while covertly harvesting private keys,
A critical remote code execution vulnerability (CVE-2026-32475) in Elementor Pro allows unauthenticated attackers to upload malicious PHP files and execute arbitrary code on vulnerable WordPress sites. With over 12 million active installations, this flaw poses an immediate threat to a massive portio
T-Mobile’s cybersecurity team took the extraordinary step of physically cutting a network cable to disconnect Chinese state-sponsored threat actors who had infiltrated their infrastructure. This drastic measure highlights the severity of the intrusion and the challenges telecommunications providers
A security researcher demonstrated how an AI agent successfully exploited misconfigurations in Snowflake’s GitHub Actions workflow to gain unauthorized access to the company’s internal Jira instance. The attack chain leveraged overly permissive workflow triggers and exposed secrets, highlighting cri
Federal agencies have confirmed that threat actors are actively using AI-generated malicious code to exploit vulnerabilities in critical infrastructure controllers. This marks a significant shift from theoretical concerns to real-world attacks, with automated exploit generation drastically reducing
Cybercriminals are deploying a sophisticated phishing framework called “Balonx Sistema” that combines AI-generated voice calls with fake banking pages to bypass multi-factor authentication (MFA) protections. The attack chain uses deepfake voice technology to impersonate bank representatives, trickin