A critical remote code execution vulnerability (CVE-2026-32475) in Elementor Pro allows unauthenticated attackers to upload malicious PHP files and execute arbitrary code on vulnerable WordPress sites. With over 12 million active installations, this flaw poses an immediate threat to a massive portio
T-Mobile’s cybersecurity team took the extraordinary step of physically cutting a network cable to disconnect Chinese state-sponsored threat actors who had infiltrated their infrastructure. This drastic measure highlights the severity of the intrusion and the challenges telecommunications providers
A security researcher demonstrated how an AI agent successfully exploited misconfigurations in Snowflake’s GitHub Actions workflow to gain unauthorized access to the company’s internal Jira instance. The attack chain leveraged overly permissive workflow triggers and exposed secrets, highlighting cri
Federal agencies have confirmed that threat actors are actively using AI-generated malicious code to exploit vulnerabilities in critical infrastructure controllers. This marks a significant shift from theoretical concerns to real-world attacks, with automated exploit generation drastically reducing
Cybercriminals are deploying a sophisticated phishing framework called “Balonx Sistema” that combines AI-generated voice calls with fake banking pages to bypass multi-factor authentication (MFA) protections. The attack chain uses deepfake voice technology to impersonate bank representatives, trickin
Password spraying attacks have exploded by 155 times their previous volume, with threat actors systematically exploiting weaknesses in multi-factor authentication (MFA) implementations. Attackers are leveraging leaked credentials, targeting accounts with weak or missing MFA protections, and using so
A recent Microsoft Defender update intended to patch a zero-day vulnerability has inadvertently broken malware scanning functionality across Windows systems worldwide. The August 2024 security update, while addressing a critical exploit, has caused scan failures, incomplete threat detection, and sys
Cybercriminals are monetizing polite responses to wrong-number texts, selling validated phone numbers and victim profiles for approximately $2 each on dark web marketplaces. These seemingly innocent text exchanges serve as reconnaissance operations, allowing scammers to gather behavioral data, asses
Oracle has released its January 2025 Critical Patch Update (CPU) containing 943 security fixes across its product portfolio, including a critical remote code execution (RCE) vulnerability in WebLogic Server (CVE-2025-21587) with a CVSS score of 9.9. This flaw allows unauthenticated attackers to comp
Microsoft’s Threat Intelligence team has uncovered an extensive infrastructure network supporting MacSync, a sophisticated information-stealing malware targeting macOS systems. The research reveals over 30 rotating domains used by threat actors to distribute the stealer, exfiltrate stolen data, and