Threat actors are exploiting Microsoft Teams to conduct vishing (voice phishing) attacks that culminate in Chaos ransomware deployment. Attackers pose as technical support personnel, manipulate targets into granting remote access, and deploy destructive ransomware that permanently destroys data whil
A critical virtual machine escape vulnerability (CVE-2026-47876) has been discovered in VMware ESXi hypervisors, carrying a CVSS score of 9.3. The flaw allows authenticated attackers with guest VM access to execute arbitrary code on the underlying host system, potentially compromising entire virtual
The Cybersecurity and Infrastructure Security Agency (CISA) has released comprehensive guidance on Open Source Software (OSS) security through its new C4 Framework, designed to help organizations systematically assess trust in open-source components. The framework introduces four critical pillars—Co
A critical virtual machine escape vulnerability (CVE-2026-47876) has been discovered in VMware ESXi hypervisors, allowing attackers with administrative privileges inside a guest VM to execute arbitrary code on the underlying host system. With a CVSS score of 9.3, this flaw affects ESXi versions 7.0,
Analog Devices, Inc. (ADI), a leading semiconductor manufacturer with over $12 billion in annual revenue, has disclosed a data breach following unauthorized access to its corporate systems. The company confirmed that threat actors infiltrated its network and exfiltrated sensitive data, though the fu
A sophisticated Russian state-sponsored threat actor has successfully adapted their innovative “half-click” exploit technique to target Microsoft Outlook users after previously compromising Zimbra email platforms. This evolution demonstrates the adversary’s persistence and technical capabilities, en
State-sponsored threat actors are exploiting vulnerabilities in AnySign4PC, a widely-used digital certificate software in South Korea, to deploy backdoors on compromised systems. The attackers leverage legitimate Korean websites that have been previously compromised to deliver malicious payloads wit
Threat actors are exploiting Linux Pluggable Authentication Modules (PAM) to deploy and conceal XMRig cryptocurrency miners on compromised systems. This sophisticated campaign uses modified PAM libraries to establish persistence, evade detection, and maintain unauthorized cryptomining operations. Th
Security researchers have discovered that popular mobile applications eSIM Plus and Nicegram share significant portions of codebase with infrastructure ties to Belarus and Russia. The analysis reveals common backend servers, API endpoints, and development patterns suggesting a coordinated operation
Work Panel has emerged as a sophisticated cybercrime-as-a-service platform that weaponizes social engineering tactics to facilitate large-scale enterprise account takeovers. This unified platform provides criminals with pre-scripted helpdesk impersonation templates, real-time collaboration tools, an