DragonForce ransomware operators have weaponized Microsoft Teams as a covert communication channel to hide malware activity from security monitoring tools. By abusing the legitimate collaboration platform’s traffic, attackers successfully blend command-and-control communications within normal busine
A telecommunications company has been found granting new employees sudo-level administrative access to production databases containing unencrypted customer personally identifiable information (PII). This egregious security failure violates fundamental access control principles, exposing millions of
Microsoft has officially confirmed a critical zero-day vulnerability dubbed “RoguePlanet” affecting Microsoft Defender across multiple Windows versions. The flaw allows attackers to bypass real-time protection and execute malicious code without detection. Active exploitation has been observed in the
Microsoft and Adobe have issued a historic combined total of 331 security vulnerabilities in their June 2026 Patch Tuesday release—the largest security update drop ever recorded. Microsoft addressed 208 CVEs affecting Windows, Office, Azure, and other products, including 15 zero-days and 8 actively
The DragonForce threat group has developed a sophisticated technique to abuse Microsoft Teams relay infrastructure as a covert communication channel for their backdoor operations. By tunneling command and control (C2) traffic through legitimate Teams relay servers, attackers effectively hide malicio
Infinite Campus, a leading student information system provider serving over 7.8 million students across 2,100+ school districts, suffered a data breach exposing personal information of approximately 137,000 users. The breach compromised names, email addresses, phone numbers, and potentially sensitiv
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a privilege escalation flaw in Cisco Catalyst SD-WAN Manager (CVE-2021-1529) and a cross-site scripting vulnerability in the LiteSpeed Cache p
Fortinet has confirmed that multiple critical vulnerabilities in FortiSandbox are being actively exploited in the wild. The flaws, tracked as CVE-2024-27760 and CVE-2024-28649, allow unauthenticated attackers to execute arbitrary code remotely. Organizations using FortiSandbox versions 4.4.0 through
A China-linked advanced persistent threat (APT) group successfully maintained unauthorized access to medical research networks for approximately two years, demonstrating sophisticated operational security and long-term espionage objectives. The intrusion targeted sensitive medical research data, int
Cisco has released emergency security patches for a critical vulnerability in its SD-WAN Manager platform that attackers are actively exploiting in the wild. Tracked as CVE-2025-20102, the flaw allows unauthenticated attackers to execute arbitrary code remotely on affected systems. Organizations run