N-able’s N-central remote monitoring and management (RMM) platform remains vulnerable to active exploitation despite an initial patch release. CVE-2026-18577, a critical authentication bypass vulnerability, allows unauthenticated attackers to gain complete administrative control over N-central serve
Threat actors are exploiting Microsoft Teams to conduct vishing (voice phishing) attacks that culminate in Chaos ransomware deployment. Attackers pose as technical support personnel, manipulate targets into granting remote access, and deploy destructive ransomware that permanently destroys data whil
A critical virtual machine escape vulnerability (CVE-2026-47876) has been discovered in VMware ESXi hypervisors, carrying a CVSS score of 9.3. The flaw allows authenticated attackers with guest VM access to execute arbitrary code on the underlying host system, potentially compromising entire virtual
Qilin ransomware affiliates are actively exploiting CVE-2026-0257, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. The flaw allows attackers to gain unauthorized VPN access without credentials, establishing initial network footholds for ransomware dep
The Qilin ransomware group is actively exploiting CVE-2024-21893, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. This flaw allows attackers with network access to execute arbitrary code with root privileges on vulnerable firewalls. Organizations runn
Threat actors are actively exploiting a critical vulnerability in Palo Alto Networks’ PAN-OS to deploy Qilin ransomware across enterprise networks. The vulnerability enables unauthenticated remote code execution on internet-facing management interfaces, allowing attackers to establish persistent acc
Inc ransomware operators are actively exploiting two zero-day vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances to gain root-level access to enterprise networks. The critical flaws, identified as CVE-2025-23006 and CVE-2025-23007, affect SMA 100 series devices running firmware ver
A cybersecurity professional turned ransomware facilitator has been sentenced to 70 months in federal prison for providing negotiation services to BlackCat/ALPHV ransomware operators. The individual helped threat actors extort victims by acting as an intermediary, translating communications, and coa
The FortiBleed vulnerability (CVE-2024-23113) is being actively exploited by INC Ransom and Lynx ransomware groups to steal credentials from vulnerable Fortinet devices. This critical authentication bypass flaw affects FortiOS SSL-VPN and allows attackers to extract session tokens and authentication
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re