A new investigation reveals that one telecommunications provider has been hosting the majority of active command-and-control (C2) servers operating across the Middle East. This concentration of malicious infrastructure under a single provider raises significant questions about infrastructure abuse,
CRITICAL: Cisco Catalyst SD-WAN flaw with perfect 10.0 severity score exploited in the wild. Attackers gaining admin access through auth bypass. Patch now.
Nintendo of America employee data has been compromised following a cyberattack on TinyPulse, a third-party employee engagement platform. The threat actor Shadowbyt3$ claims responsibility for breaching TinyPulse’s systems and has allegedly exfiltrated sensitive employee information from multiple org
Cisco has released emergency security patches for a critical vulnerability in its SD-WAN Manager platform that attackers are actively exploiting in the wild. Tracked as CVE-2025-20102, the flaw allows unauthenticated attackers to execute arbitrary code remotely on affected systems. Organizations run
A Chinese-speaking advanced persistent threat (APT) group tracked as CL-STA-1062 has been observed deploying a previously unknown backdoor dubbed TinyRCT in targeted cyber espionage operations across Southeast Asia. The sophisticated malware features remote access capabilities, command execution fun
A critical vulnerability dubbed “PixelSmash” has been discovered in FFmpeg, one of the world’s most widely used multimedia processing frameworks. The flaw (CVE-2024-XXXXX) enables attackers to achieve remote code execution through specially crafted video files. With FFmpeg integrated into thousands
Security researchers have discovered critical vulnerabilities in Apple’s AirDrop and Google’s Quick Share file-sharing protocols that allow nearby attackers to trigger device crashes and denial-of-service conditions. These flaws exploit weaknesses in proximity-based sharing mechanisms, enabling mali
The Russia-linked Turla APT group has deployed a previously unknown backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. Google’s Threat Analysis Group (TAG) identified this sophisticated malware framework featuring modular architecture, encrypted command-and-contro
A critical path traversal vulnerability in Microsoft Teams for Android allows attackers to access sensitive data from the application’s storage. The flaw, discovered in versions prior to 1416/1.0.0.2024102404, enables malicious actors to read arbitrary files from the app’s private directory, potenti
A sophisticated supply chain attack has compromised 32 Red Hat packages after attackers gained control of a maintainer’s GitHub account. The Miasma malware, embedded within these packages, poses significant risks to Red Hat Enterprise Linux (RHEL) and Fedora users. The malicious code was designed to