Microsoft has officially confirmed a critical zero-day vulnerability dubbed “RoguePlanet” affecting Microsoft Defender across multiple Windows versions. The flaw allows attackers to bypass real-time protection and execute malicious code without detection. Active exploitation has been observed in the
Microsoft and Adobe have issued a historic combined total of 331 security vulnerabilities in their June 2026 Patch Tuesday release—the largest security update drop ever recorded. Microsoft addressed 208 CVEs affecting Windows, Office, Azure, and other products, including 15 zero-days and 8 actively
The DragonForce threat group has developed a sophisticated technique to abuse Microsoft Teams relay infrastructure as a covert communication channel for their backdoor operations. By tunneling command and control (C2) traffic through legitimate Teams relay servers, attackers effectively hide malicio
Microsoft has officially confirmed a critical zero-day local privilege escalation (LPE) vulnerability in the Microsoft Malware Protection Engine, designated as CVE-2026-50656. Codenamed “RoguePlanet,” the flaw allows a local attacker to execute a timing-based race condition exploit. If successful, this exploit bypasses active security controls to escalate user privileges to NT AUTHORITY\SYSTEM. The underlying Proof-of-Concept (PoC)…
Infinite Campus, a leading student information system provider serving over 7.8 million students across 2,100+ school districts, suffered a data breach exposing personal information of approximately 137,000 users. The breach compromised names, email addresses, phone numbers, and potentially sensitiv
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a privilege escalation flaw in Cisco Catalyst SD-WAN Manager (CVE-2021-1529) and a cross-site scripting vulnerability in the LiteSpeed Cache p
Fortinet has confirmed that multiple critical vulnerabilities in FortiSandbox are being actively exploited in the wild. The flaws, tracked as CVE-2024-27760 and CVE-2024-28649, allow unauthenticated attackers to execute arbitrary code remotely. Organizations using FortiSandbox versions 4.4.0 through
North Korean threat actors are leveraging fake Microsoft security alerts to distribute NarwhalRAT, a sophisticated remote access trojan. The campaign uses convincing Windows security warnings to trick users into downloading malicious payloads, granting attackers full system access. Organizations mus
A China-linked advanced persistent threat (APT) group successfully maintained unauthorized access to medical research networks for approximately two years, demonstrating sophisticated operational security and long-term espionage objectives. The intrusion targeted sensitive medical research data, int
Cisco has released emergency security patches for a critical vulnerability in its SD-WAN Manager platform that attackers are actively exploiting in the wild. Tracked as CVE-2025-20102, the flaw allows unauthenticated attackers to execute arbitrary code remotely on affected systems. Organizations run