A sophisticated China-linked botnet known as JDY has expanded its infrastructure to over 1,500 compromised devices worldwide, primarily targeting network edge devices for cyber reconnaissance operations. The botnet leverages compromised routers, IoT devices, and network appliances to create a distri
Cybercriminals are exploiting TikTok and Instagram Reels to distribute the notorious Vidar infostealer malware. Attackers create seemingly legitimate content promoting fake software, AI tools, and cracked applications that direct users to malicious download sites. Once executed, Vidar harvests sensi
A critical zero-day vulnerability in Windows’ Collaborative Translation Framework (CTF) client-server runtime process (CTFMON.EXE) allows authenticated attackers to escalate privileges to SYSTEM level. The vulnerability, actively exploited in targeted attacks, affects all supported Windows versions
A sophisticated botnet attributed to Chinese threat actors, designated JDY, has significantly expanded its targeting of U.S. military network infrastructure. The campaign leverages compromised IoT devices and network equipment to establish persistent access points near military installations. Intell
Russian state-sponsored threat actors are actively exploiting CVE-2025-8088, a patched vulnerability in WinRAR, despite the availability of security updates. The flaw allows attackers to execute arbitrary code through specially crafted archive files, targeting organizations that have failed to updat
Identity verification has become the cornerstone of digital security, yet many organizations still struggle with implementation. This article outlines five critical best practices: implementing multi-layered authentication, leveraging biometric technologies securely, maintaining continuous verificat
GitHub has disabled automatic execution of npm lifecycle scripts following discoveries of malicious exploitation. The platform will no longer automatically run `preinstall`, `install`, and `postinstall` scripts during package installation on GitHub-hosted services. This critical security decision co
Microsoft has confirmed that certain Windows 11 systems are experiencing failures when attempting to install the latest monthly security updates. This issue prevents affected machines from receiving critical patches that address actively exploited vulnerabilities, leaving them exposed to known attac
NSO Group has allegedly violated a court order by continuing to develop and deploy exploits targeting WhatsApp users, despite ongoing litigation and explicit judicial restrictions. The Israeli spyware vendor’s Pegasus software was reportedly used to compromise WhatsApp accounts through zero-click ex
Ivanti has disclosed two critical vulnerabilities in Ivanti Sentry—CVE-2026-10520 and CVE-2026-10523—that enable unauthenticated attackers to achieve remote code execution (RCE). CVE-2026-10520 is an authentication bypass vulnerability with a CVSS score of 9.8, while CVE-2026-10523 is a command inje