Ivanti has disclosed a maximum severity vulnerability (CVE-2025-22457) in its Sentry product that allows unauthenticated attackers to execute arbitrary code with root privileges. The flaw affects Sentry versions 10.0.2 and earlier, carrying a CVSS score of 10.0. Organizations using Ivanti Sentry mus
Six critical vulnerabilities collectively dubbed “Proto6” have been discovered in protobuf.js, a widely-used JavaScript implementation of Google’s Protocol Buffers. These flaws expose Node.js applications to remote code execution (RCE) and denial-of-service (DoS) attacks. The vulnerabilities stem fr
Anthropic has launched Claude Fable 5, a new AI model available for a limited time period. This specialized model introduces unique capabilities that present both opportunities and security considerations for organizations. Security teams must understand the model’s architecture, assess potential at
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Threat actors are increasingly targeting cloud logging infrastructure as a primary defense evasion technique. By disabling, deleting, or manipulating cloud audit logs across AWS CloudTrail, Azure Monitor, and Google Cloud Logging, attackers effectively blind security teams during intrusions. This ta
Meta has updated its data usage policies to expand how it leverages off-Meta business activity data beyond advertising purposes. The social media giant will now use information about user interactions with third-party businesses—collected through Meta Pixel, Conversions API, and similar tools—to per
Microsoft’s June 2026 Patch Tuesday addresses 89 security vulnerabilities across its product ecosystem, including five zero-day vulnerabilities—three actively exploited in the wild. The most critical issues affect Windows Kernel, Microsoft Exchange Server, and Azure Cloud Services. Organizations sho
ServiceNow, a major cloud-based workflow automation platform used by thousands of enterprises, disclosed a security incident that exposed customer data through a misconfigured development instance. The breach, discovered in early 2024, affected an undisclosed number of customers and involved unautho
Recent testing has confirmed that Russian satellites possess the capability to jam GPS signals across entire continents, representing a significant escalation in electronic warfare capabilities. This space-based jamming threatens critical infrastructure, aviation, maritime navigation, financial syst
A critical bug in Microsoft 365’s cloud infrastructure inadvertently bypassed Windows driver auto-update controls, triggering widespread service degradation across enterprise environments. The vulnerability allowed unauthorized driver updates to push through despite administrator-configured update p