A critical authentication bypass vulnerability in SimpleHelp remote support software (CVE-2024-48558) is being actively exploited by threat actors to deploy TaskWeaver malware and the Djinn information stealer. The flaw allows unauthenticated attackers to gain unauthorized access to systems running
Japanese telecommunications giant KDDI Corporation disclosed a massive data breach affecting up to 14.2 million email login credentials across six internet service providers. The incident, which originated from unauthorized access to KDDI’s email infrastructure, exposed usernames and passwords store
CISA has issued an urgent alert regarding widespread exploitation of a credential exposure vulnerability dubbed “FortiBleed” affecting over 74,000 Fortinet devices globally. The flaw allows attackers to extract plaintext credentials from vulnerable FortiGate SSL-VPN appliances without authentication
Microsoft brings back resizable taskbar and Start menu to Windows 11. A small UI change that could have big security implications for enterprise environments.
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re
Chinese state-sponsored threat actor TA4922 is conducting sophisticated espionage operations across the UK and Europe using a previously undocumented malware strain called SilentRunLoader. This custom loader exhibits advanced evasion techniques and serves as a conduit for additional payloads, target
Foxconn just became the latest manufacturing giant hit by ransomware. With 600 attacks this year alone, manufacturers are in the crosshairs. Downtime = money.
Researchers have disclosed four chained vulnerabilities in OpenClaw, collectively dubbed Claw Chain, enabling attackers to steal data, escalate privileges, and establish persistence through the AI agent’s own runtime. All flaws have been patched in OpenClaw version 2026.4.22 and users are urged to update immediately.
Microsoft has introduced native Unix coreutils to Windows, marking a significant shift in the operating system’s architecture. While this integration enhances developer productivity and cross-platform compatibility, it introduces new attack surfaces, permission model complexities, and potential secu
Your phone knows everything. Law enforcement knows that too. Every text, photo, and location ping becomes evidence when investigators come knocking.