Apple has released a firmware update addressing a critical vulnerability in Beats Studio Buds and Beats Studio Buds+ that allowed nearby attackers to hijack the microphone and eavesdrop on users. The flaw (CVE-2024-54537) affected the Bluetooth pairing process, enabling unauthorized access within Bl
F5 Networks has released security patches addressing two critical remote code execution (RCE) vulnerabilities in NGINX Open Source. These flaws, tracked as CVE-2024-31079 and CVE-2024-32760, could allow unauthenticated attackers to execute arbitrary code on vulnerable servers. Organizations running
Nintendo has confirmed that employee and corporate data was compromised in a cyberattack targeting Amedisys, a WebMD subsidiary providing wellness services. The breach, which occurred in early 2025, exposed personal information of Nintendo employees who used the platform’s healthcare services. This
A critical vulnerability in FIFA’s streaming infrastructure could have allowed attackers to remotely hijack World Cup broadcast streams, potentially exposing millions of viewers to malicious content. The flaw, discovered in the content delivery system, enabled unauthorized access to streaming server
North Korean threat actors are leveraging fake Microsoft security alerts to distribute NarwhalRAT, a sophisticated remote access trojan. The campaign uses convincing Windows security warnings to trick users into downloading malicious payloads, granting attackers full system access. Organizations mus
A China-linked advanced persistent threat (APT) group successfully maintained unauthorized access to medical research networks for approximately two years, demonstrating sophisticated operational security and long-term espionage objectives. The intrusion targeted sensitive medical research data, int
Chinese state-sponsored threat actors have developed a sophisticated email exfiltration technique that abuses legitimate Google Workspace email forwarding rules. The campaign targeted defense contractors and research institutions, automatically forwarding sensitive emails to attacker-controlled acco
North Korean state-sponsored threat actors are exploiting the trust developers place in their development tools by weaponizing legitimate software packages and IDE extensions. These campaigns transform everyday coding utilities into malware delivery mechanisms, targeting software developers globally
Two decades after Apple’s historic transition to Intel processors in 2006, the company has come full circle by moving to its own Apple Silicon chips. This journey reveals a fascinating evolution in hardware security architecture, from the limited protections of PowerPC Macs through Intel’s x86 vulne
Chinese state-sponsored threat actors successfully infiltrated medical and military networks, maintaining persistent access for over 12 months. The attackers conducted extensive surveillance operations, compromising Gmail accounts and exfiltrating sensitive data from healthcare institutions and defe