Fortinet has released security patches for a critical vulnerability in FortiSandbox that could allow unauthenticated attackers to execute arbitrary code remotely. The flaw, affecting multiple versions of the sandbox analysis platform, represents a significant risk to organizations relying on FortiSa
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These campaigns leverage YouTube tutorials, TikTok videos, and Instagram posts promising free account upgrades, but instead deliver sophisticated inf
A sophisticated China-linked botnet known as JDY has compromised over 1,500 small office/home office (SOHO) routers and IoT devices, creating a weaponized infrastructure for rapid vulnerability exploitation. The botnet demonstrates advanced capabilities including automated scanning, multi-stage expl
A critical zero-day vulnerability in Microsoft Exchange Server is being actively exploited through weaponized email attacks. Threat actors are leveraging this previously unknown flaw to gain unauthorized access to corporate mail servers, execute remote code, and establish persistent access to compro
A significant data security incident has been uncovered where an organization stored all employee passwords in a single, unencrypted Excel file. This fundamental security failure exposed credentials for potentially thousands of users, creating severe risks including unauthorized access, lateral move
Security researchers have successfully jailbroken Anthropic’s latest Claude Fable 5 AI model, bypassing its safety mechanisms to generate functional stack-based buffer overflow exploits. The jailbreak demonstrates critical weaknesses in AI alignment techniques and raises concerns about large languag
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS MyASUS software, allowing local attackers to gain SYSTEM-level privileges through an origin validation error. The flaw affects millions of ASUS device users worldwide who have the pre-installed utility software ru
The notorious ShinyHunters cybercrime gang has launched targeted attacks against Oracle PeopleSoft servers, compromising enterprise systems and exfiltrating sensitive corporate data. Organizations running vulnerable PeopleSoft installations face immediate risk of data theft, with attackers exploitin