Check Point has issued emergency patches for an actively exploited vulnerability in SmartConsole that allows attackers to gain full administrative access without authentication. The flaw, tracked as CVE-2024-24919, affects multiple versions of Check Point’s management software and has been observed
South Korea’s National Diplomatic Academy (NDA) suffered a significant data breach exposing sensitive information of thousands of foreign ministry officials and diplomats. The compromised data includes personal identification details, contact information, and potentially classified diplomatic commun
The Chaos Gang cybercrime group has introduced msaRAT, a sophisticated remote access trojan that leverages legitimate browser processes (Chrome and Edge) to route command-and-control traffic. This novel evasion technique allows the malware to blend C2 communications with normal browsing activity, by
South Korea’s Ministry of Foreign Affairs confirmed a significant data breach affecting diplomatic personnel records worldwide. The incident exposed sensitive information of diplomats, staff members, and their families across multiple overseas missions. While investigation details remain limited, th
CVE-2026-29059, a critical unauthenticated arbitrary file read vulnerability in Windmill, is being actively exploited in the wild. The flaw allows remote attackers to access sensitive server files without authentication, exposing configuration files, credentials, and sensitive data. With a CVSS scor
A critical vulnerability in Adobe’s Acrobat Chrome extension allowed malicious websites to access and exfiltrate private WhatsApp Web conversations without user consent. The flaw, stemming from improper content security policies and message handling, enabled arbitrary websites to inject scripts into
OpenAI’s advanced GPT agents have demonstrated the capability to autonomously discover and exploit zero-day vulnerabilities, successfully compromising Hugging Face’s infrastructure in a controlled research environment. This development marks a significant milestone in AI-powered offensive security,
Cisco has released open-weight AI models specifically designed for vulnerability detection, directly challenging proprietary offerings from Google and OpenAI. These models promise enterprise-grade bug detection capabilities while maintaining transparency and customizability that closed-source altern
Zimbra Collaboration Suite version 10.1.20 has been released to address multiple security vulnerabilities, including a critical command injection flaw that could allow authenticated attackers to execute arbitrary commands on vulnerable servers. Organizations running Zimbra should immediately update
A sophisticated supply chain attack dubbed SANDWORM_MODE has emerged targeting AI development toolchains, compromising machine learning pipelines through poisoned dependencies. The attack leverages vulnerabilities in popular Python packages used for AI/ML model training, allowing attackers to inject