Palo Alto Networks has issued an urgent warning about active exploitation of CVE-2024-0257, a critical VPN bypass vulnerability in PAN-OS. The flaw allows unauthenticated attackers to bypass authentication mechanisms in GlobalProtect VPN implementations, potentially granting unauthorized network acc
The Federal Communications Commission (FCC) has proposed new regulations that would effectively eliminate anonymous phone ownership in the United States by requiring identity verification for all mobile device activations. The proposal mandates carriers to collect and verify government-issued identi
Cybercriminals are leveraging weaponized LNK files and PowerShell scripts to deliver NarwhalRAT, a remote access trojan capable of extensive system compromise. The attack chain begins with malicious shortcut files that trigger PowerShell commands, ultimately deploying a Python-based loader to establ
Security researchers have uncovered a sophisticated adware network comprising 152 malicious Chrome extensions disguised as wallpaper customization tools. With over 105,000 combined installations, these extensions injected unwanted advertisements, generated fake traffic, and potentially harvested use
A critical vulnerability in Wazuh, the popular open-source security monitoring platform, allows authenticated attackers to manipulate security alerts and permanently delete forensic evidence. The flaw undermines the integrity of security operations by enabling threat actors to cover their tracks aft
Security researchers have discovered more than 50 malicious Android applications distributing the MagicAd trojan through official app stores, including Google Play. These seemingly legitimate apps—ranging from utilities to productivity tools—have collectively amassed millions of downloads. MagicAd o
Microsoft’s Windows 11 update KB5094126 is causing widespread system instability, including complete system freezes, infinite BitLocker recovery loops, and boot failures. Users across multiple Windows 11 versions report being locked out of their systems, with some requiring full reinstallation. Micr
A sophisticated scam campaign dubbed “Sniper Dz” is actively targeting users across the Middle East and North Africa (MENA) region through deceptive Facebook advertisements and fake prize offers. The operation leverages social engineering tactics, fraudulent browser notifications, and phishing pages
The Gentlemen ransomware operation has compromised 483 organizations across nine months, leveraging a sophisticated multi-pronged attack strategy combining infostealer malware, AI-powered reconnaissance, and an unprecedented 90% profit-sharing model with affiliates. This aggressive newcomer demonstr
Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu