A critical vulnerability in Check Point VPN solutions allows attackers to bypass password authentication in IKEv1 configurations, enabling unauthorized network access. The flaw is currently under active exploitation, affecting thousands of enterprise networks worldwide. Organizations using Check Poi
The U.S. State Department has announced a combined $10 million reward for information leading to the identification or location of members from two Russian hacking groups—UNC5792 and UNC4221—who have been actively targeting users of encrypted messaging platforms including WhatsApp and Signal. These
The notorious cybercrime group ShinyHunters has leaked what appears to be Charter Communications customer data on a dark web forum, claiming to have exposed information on approximately 5 million customers. The dataset allegedly contains personal information including names, addresses, phone numbers
Threat actors are employing sophisticated social engineering tactics by disguising malicious Linux payloads as legitimate SSH-related files during software package installations. The attack leverages user trust in familiar system utilities, hiding malware within files named to resemble standard Open
CISA has added CVE-2025-67038 to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation of a critical authentication bypass vulnerability in Lantronix EDS5000 terminal servers. The flaw allows unauthenticated attackers to gain administrative access remotely, posing severe
Microsoft has confirmed that certain Windows 11 systems are experiencing failures when attempting to install the latest monthly security updates. This issue prevents affected machines from receiving critical patches that address actively exploited vulnerabilities, leaving them exposed to known attac
Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu
Over 400 packages in the Arch User Repository (AUR) were compromised in a sophisticated supply chain attack that deployed information-stealing malware and an eBPF-based rootkit. The attacker hijacked maintainer accounts and injected malicious code into build scripts, affecting thousands of users who
Windows 11 and Microsoft Edge fall to hackers at Pwn2Own Berlin. Day one: $523K paid out for 24 zero-day exploits. The bugs are real and they’re spectacular.
UK forced to buy US glide bombs for F-35s after software delays postpone British SPEAR 3 missile integration. StormBreaker becomes the stopgap solution.