A stock exchange executive’s Microsoft Outlook email account was compromised for approximately 150 days in a sophisticated cyber espionage operation. The attacker maintained persistent access to highly sensitive financial communications, corporate strategies, and confidential market information. Thi
CISA has added a new critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. Federal agencies have 21 days to apply patches or discontinue use of affected products. The addition signals immediate threat to organizations using the vulne
A security researcher has publicly released proof-of-concept exploits for multiple Microsoft vulnerabilities, bypassing responsible disclosure protocols in protest of the company’s vulnerability handling practices. The leaked exploits target Windows components and could enable attackers to escalate
Russia’s Federal Security Service (FSB) has publicly accused foreign intelligence agencies of orchestrating a sophisticated mobile malware campaign targeting Russian government officials’ iPhones. The FSB claims thousands of devices from domestic users and foreign diplomatic missions were compromise
A financial institution operated with untested security controls for nearly a year, exposing critical banking infrastructure to potential exploitation. The incident highlights systemic failures in vulnerability management programs, where security testing gaps created an unknown risk exposure window.
Acer Wave 7 Mesh WiFi routers contain multiple maximum severity (CVSS 10.0) zero-day vulnerabilities that allow unauthenticated remote attackers to execute arbitrary code, bypass authentication, and gain complete control over affected devices. These critical flaws remained unpatched at the time of d
A critical zero-day vulnerability in Visual Studio Code allows attackers to steal GitHub authentication tokens through a single click on a malicious link. The exploit leverages VS Code’s URI handler mechanism to execute unauthorized actions without user consent, potentially compromising thousands of
Google’s June 2026 Android security update patches 124 vulnerabilities across multiple components, including one zero-day flaw (CVE-2026-XXXXX) actively exploited in the wild. The critical vulnerability affects the Android Framework and allows privilege escalation without user interaction. All suppo
Russia’s Federal Security Service (FSB) has publicly accused Western intelligence agencies of orchestrating a sophisticated mobile device compromise campaign targeting Russian government officials and diplomatic personnel. The FSB claims thousands of Apple iPhones were converted into covert surveill
Microsoft has issued a public apology and reversed its stance following a heated dispute with a security researcher who disclosed a zero-day vulnerability. The tech giant initially threatened the researcher with legal action and refused a CVE assignment, sparking widespread criticism from the cybers