The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a privilege escalation flaw in Cisco Catalyst SD-WAN Manager (CVE-2021-1529) and a cross-site scripting vulnerability in the LiteSpeed Cache p
Fortinet has confirmed that multiple critical vulnerabilities in FortiSandbox are being actively exploited in the wild. The flaws, tracked as CVE-2024-27760 and CVE-2024-28649, allow unauthenticated attackers to execute arbitrary code remotely. Organizations using FortiSandbox versions 4.4.0 through
North Korean threat actors are leveraging fake Microsoft security alerts to distribute NarwhalRAT, a sophisticated remote access trojan. The campaign uses convincing Windows security warnings to trick users into downloading malicious payloads, granting attackers full system access. Organizations mus
A China-linked advanced persistent threat (APT) group successfully maintained unauthorized access to medical research networks for approximately two years, demonstrating sophisticated operational security and long-term espionage objectives. The intrusion targeted sensitive medical research data, int
Cisco has released emergency security patches for a critical vulnerability in its SD-WAN Manager platform that attackers are actively exploiting in the wild. Tracked as CVE-2025-20102, the flaw allows unauthenticated attackers to execute arbitrary code remotely on affected systems. Organizations run
A sophisticated supply chain attack compromised the OptinMonster WordPress plugin, affecting approximately 1.2 million active installations. Attackers gained unauthorized access to the plugin’s distribution infrastructure, injecting malicious code that created backdoor administrator accounts on affe
Threat actors are leveraging weaponized Virtual Hard Disk (VHDX) files to deploy Remcos RAT, a powerful remote access trojan. This attack vector bypasses traditional security measures by exploiting Windows’ native ability to mount virtual disk images, delivering the malware payload through multiple
iRhythm Technologies, a leading provider of cardiac monitoring solutions, has disclosed a significant data breach affecting patient information. Unauthorized actors gained access to systems containing personal and medical data, including names, contact information, dates of birth, Social Security nu
A critical zero-day vulnerability in the LiteSpeed Cache plugin for cPanel has been actively exploited in the wild, allowing attackers to gain unauthorized administrative access to WordPress websites. The vulnerability, affecting thousands of hosting environments worldwide, enables privilege escalat
A critical authentication bypass vulnerability in SimpleHelp remote support software has left nearly 14,000 publicly accessible servers exposed to potential compromise. The flaw allows unauthenticated attackers to gain unauthorized access to remote desktop sessions, potentially exposing sensitive co