Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm
A critical remote code execution vulnerability (CVE-2026-32475) in Elementor Pro allows unauthenticated attackers to upload malicious PHP files and execute arbitrary code on vulnerable WordPress sites. With over 12 million active installations, this flaw poses an immediate threat to a massive portio
Password spraying attacks have exploded by 155 times their previous volume, with threat actors systematically exploiting weaknesses in multi-factor authentication (MFA) implementations. Attackers are leveraging leaked credentials, targeting accounts with weak or missing MFA protections, and using so
Cybercriminals are monetizing polite responses to wrong-number texts, selling validated phone numbers and victim profiles for approximately $2 each on dark web marketplaces. These seemingly innocent text exchanges serve as reconnaissance operations, allowing scammers to gather behavioral data, asses
Adobe has disclosed multiple critical vulnerabilities in ColdFusion that allow remote attackers to execute arbitrary code on vulnerable servers. The flaws, affecting ColdFusion 2021 and 2023 versions, carry CVSS scores ranging from 7.5 to 9.8, with at least one vulnerability enabling unauthenticated
A UK criminal records office suffered a significant data breach due to an unpatched content management system (CMS) and systematically ignored security alerts. The incident exposed sensitive criminal records data, highlighting catastrophic failures in basic security hygiene. The breach stemmed from
A dataset containing 9.2 million Israeli citizen records has surfaced on dark web marketplaces, marketed as a recent breach of Israel’s population registry. Investigation reveals this data originates from a 2005 compromise at Israel’s Population and Immigration Authority, making it nearly two decade
A critical zero-day vulnerability in Metabase, an open-source business intelligence platform, is being actively exploited in the wild. The flaw, assigned a maximum CVSS score of 10.0, allows unauthenticated attackers to gain administrative access and extract sensitive data from affected instances. O
Security researchers have unveiled a novel interrupt injection attack that successfully bypasses Spectre v2 mitigations on both Intel and AMD processors. The attack exploits the way CPUs handle interrupts during speculative execution, allowing attackers to leak sensitive data from kernel memory desp
A threat actor group known as ExfilSquad has successfully breached a UK police database, exposing personal information of over 100,000 police officers and staff members. The leaked data includes names, ranks, email addresses, phone numbers, and potentially home addresses of law enforcement personnel