Threat actors are actively exploiting unpatched Microsoft SharePoint servers to deploy ransomware and custom backdoors across enterprise networks. Multiple attack campaigns targeting known SharePoint vulnerabilities have been observed in the wild, with attackers leveraging these entry points to esta
A critical namespace vulnerability affecting major cloud service providers enables attackers to hijack abandoned storage bucket names, potentially intercepting sensitive data from applications still referencing those resources. This technique exploits the global namespace model used by AWS S3, Azure
The notorious cybercriminal group ShinyHunters has weaponized a zero-day vulnerability in Oracle PeopleSoft Campus Solutions, launching targeted attacks against educational institutions. The exploit allows unauthorized access to student records, financial data, and administrative systems. Multiple c
A newly disclosed prompt injection attack dubbed “BioShocking” exploits AI-powered browsers to bypass safety mechanisms and execute unauthorized actions including data exfiltration, credential theft, and malicious navigation. The technique leverages carefully crafted prompts that manipulate the AI a
New TencShell malware gives attackers complete remote control of infected systems—full screen access, browser data theft, and UAC bypass capabilities detected
A critical zero-day vulnerability in Cisco systems is being actively exploited by malicious threat actors who have successfully gained the highest level of administrative access at a communications service provider. The exploitation has granted attackers complete control over critical network infras
The FortiBleed vulnerability (CVE-2024-23113) is being actively exploited by INC Ransom and Lynx ransomware groups to steal credentials from vulnerable Fortinet devices. This critical authentication bypass flaw affects FortiOS SSL-VPN and allows attackers to extract session tokens and authentication
Google has introduced a new security feature in Android to combat the rising threat of AI-generated deepfake voice scams. The protection system uses on-device machine learning to detect suspicious audio patterns indicative of synthetic voice manipulation during phone calls. This proactive measure ad
The Court of Justice of the European Union (CJEU) has upheld a €4.1 billion antitrust fine against Google for abusing its Android market dominance. The ruling highlights serious concerns about Google’s control over user data access, app installation restrictions, and the security implications of its
Federal law enforcement agencies have seized two cryptocurrency mixing services, AudiA6 and Dark2Web, as part of a massive $389 million money laundering investigation. The operation, coordinated across multiple jurisdictions, targeted platforms that facilitated the laundering of illicit proceeds fro