Threat actors are leveraging a sophisticated multi-stage ClickFix social engineering technique to deploy MLTBackdoor malware on Windows systems. The attack chain begins with fake CAPTCHA prompts that trick users into executing malicious PowerShell commands, ultimately installing persistent backdoor
A critical vulnerability in ServiceNow’s platform has been actively exploited by threat actors to gain unauthorized access to customer instances. The flaw, affecting multiple ServiceNow versions, allows attackers to bypass authentication mechanisms and access sensitive corporate data. Organizations
Ivanti has disclosed a maximum severity vulnerability (CVE-2025-22457) in its Sentry product that allows unauthenticated attackers to execute arbitrary code with root privileges. The flaw affects Sentry versions 10.0.2 and earlier, carrying a CVSS score of 10.0. Organizations using Ivanti Sentry mus
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Threat actors are increasingly targeting cloud logging infrastructure as a primary defense evasion technique. By disabling, deleting, or manipulating cloud audit logs across AWS CloudTrail, Azure Monitor, and Google Cloud Logging, attackers effectively blind security teams during intrusions. This ta
Microsoft’s June 2026 Patch Tuesday addresses 89 security vulnerabilities across its product ecosystem, including five zero-day vulnerabilities—three actively exploited in the wild. The most critical issues affect Windows Kernel, Microsoft Exchange Server, and Azure Cloud Services. Organizations sho
Apple’s upcoming macOS 27 will exclusively support Apple Silicon processors, officially ending support for Intel-based Macs. This architectural shift eliminates an entire class of x86-64 vulnerabilities, significantly reduces the operating system’s attack surface, and forces security teams to reasse
GitHub has taken down over 70 repositories linked to Microsoft following a suspected worm infection that compromised multiple code repositories. The mass removal has caused widespread CI/CD pipeline failures across numerous projects that depended on these repositories. The incident highlights the ca
Threat actors have developed a sophisticated malware campaign targeting WordPress sites, leveraging Steam’s gaming platform as an unconventional command-and-control (C2) channel. This innovative technique abuses Steam’s public profile features to hide malicious commands in plain sight, evading tradi
The C0XMO botnet is actively targeting DD-WRT routers through known vulnerabilities, establishing persistent footholds on compromised devices. Unlike typical botnets, C0XMO actively hunts and terminates competing malware, securing exclusive control over infected systems. The campaign demonstrates so