CISA has added Apache Tomcat CVE-2026-34486 to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation in the wild. The critical vulnerability affects encryption mechanisms in multiple Tomcat versions, allowing attackers to decrypt sensitive session data and potentiall
A Russian state-sponsored threat actor has developed a sophisticated attack methodology exploiting public Wi-Fi captive portals to deliver malware to unsuspecting users. The campaign targets hotels, airports, and coffee shops across Europe and North America, transforming legitimate login pages into
SonicWall Secure Mobile Access (SMA) appliances are under active attack via a critical zero-click remote code execution vulnerability that grants attackers root-level access without authentication. The flaw, affecting internet-facing VPN gateways used by thousands of organizations, allows complete d
Adobe has disclosed a critical remote code execution (RCE) vulnerability in Adobe Campaign Classic, assigned a maximum CVSS score of 10.0. Tracked as CVE-2024-36204, this pre-authentication flaw allows attackers to execute arbitrary code without any user interaction. All organizations running affect
South Korean cybersecurity authorities have issued urgent warnings about an ongoing state-backed watering hole attack campaign targeting domestic organizations. The sophisticated operation involves compromising legitimate websites frequently visited by government officials, defense contractors, and
The PHP development team has released security patches addressing three critical vulnerabilities affecting multiple PHP versions. These flaws enable SQL injection attacks through PDO parameter handling (CVE-2024-8932), memory corruption via XML processing (CVE-2024-8925), and server crashes through
North Korean threat actors are deploying sophisticated malvertising campaigns targeting macOS users with fake browser and system updates. The campaign distributes crypto-stealing malware through malicious advertisements on legitimate websites, leveraging social engineering to convince victims to dow
A critical virtual machine escape vulnerability (CVE-2026-47876) has been discovered in VMware ESXi hypervisors, allowing attackers with administrative privileges inside a guest VM to execute arbitrary code on the underlying host system. With a CVSS score of 9.3, this flaw affects ESXi versions 7.0,
A sophisticated Russian state-sponsored threat actor has successfully adapted their innovative “half-click” exploit technique to target Microsoft Outlook users after previously compromising Zimbra email platforms. This evolution demonstrates the adversary’s persistence and technical capabilities, en
Security researchers have discovered that popular mobile applications eSIM Plus and Nicegram share significant portions of codebase with infrastructure ties to Belarus and Russia. The analysis reveals common backend servers, API endpoints, and development patterns suggesting a coordinated operation