A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS MyASUS software, allowing local attackers to gain SYSTEM-level privileges through an origin validation error. The flaw affects millions of ASUS device users worldwide who have the pre-installed utility software ru
A security researcher publicly disclosed a zero-day vulnerability affecting Windows systems after a dispute with Microsoft over the company’s handling of the flaw. The unpatched vulnerability allows local attackers to escalate privileges, potentially granting SYSTEM-level access. The public release
Cybercriminals are distributing cryptojacking malware through counterfeit utility software websites, bundling legitimate remote access tool ScreenConnect with cryptocurrency miners. The campaign targets users searching for popular system utilities, redirecting them to malicious domains that deliver
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These fraudulent “hacks” and “cracks” promise lifetime Premium access but instead install malicious software that harvests credentials, cryptocurrenc
Security teams are bridging the gap between threat intelligence consumption and proactive threat hunting through automated pipelines that transform raw intelligence feeds into actionable hunt plans. These systems parse indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new binding operational directive requiring federal civilian agencies to dramatically reduce vulnerability patching timelines. The directive introduces a risk-based prioritization framework that moves beyond traditional CVSS sc
A critical zero-day vulnerability in Windows’ Collaborative Translation Framework (CTF) client-server runtime process (CTFMON.EXE) allows authenticated attackers to escalate privileges to SYSTEM level. The vulnerability, actively exploited in targeted attacks, affects all supported Windows versions
Russian state-sponsored threat actors are actively exploiting CVE-2025-8088, a patched vulnerability in WinRAR, despite the availability of security updates. The flaw allows attackers to execute arbitrary code through specially crafted archive files, targeting organizations that have failed to updat
The Gentlemen ransomware gang emerged in 2024 as a sophisticated threat actor targeting healthcare, manufacturing, and critical infrastructure. Despite their polished communication style and claims of ethical boundaries, the group has successfully breached over 30 organizations globally. This invest
Ivanti has disclosed two critical vulnerabilities in Ivanti Sentry—CVE-2026-10520 and CVE-2026-10523—that enable unauthenticated attackers to achieve remote code execution (RCE). CVE-2026-10520 is an authentication bypass vulnerability with a CVSS score of 9.8, while CVE-2026-10523 is a command inje