Security researchers exploited Samsung Galaxy S26 devices three additional times at Pwn2Own Ireland 2026, contributing to 45 zero-day vulnerabilities discovered. The $232,500 bounty payout highlights critical security gaps requiring immediate SOC attention and patch preparation.
Threat actors are exploiting F5 BIG-IP appliances as entry points to compromise enterprise Linux networks. Attackers gain initial access through vulnerable BIG-IP devices, establish SSH backdoors, and pivot laterally into connected Linux infrastructure. Organizations using F5 BIG-IP in their network
A new cloud security report reveals that organizations are drowning in tool sprawl, with the average enterprise using 30+ security solutions that fail to communicate effectively. This fragmentation creates dangerous visibility gaps, slows incident response by up to 60%, and increases misconfiguratio
Carnival Cruise Line has confirmed a significant data breach impacting nearly 6 million individuals, including current and former employees as well as cruise passengers. The breach exposed sensitive personal information including Social Security numbers, passport details, and health records. The com
Meta has filed a contempt of court motion against NSO Group, alleging the Israeli spyware vendor violated a 2020 injunction by continuing to target WhatsApp users. The complaint claims NSO Group deployed new infrastructure and attack methods despite court orders prohibiting such activities. This leg
Security researchers have uncovered a massive campaign exploiting the DCloud Uni-App framework, with over 236,000 malicious sites actively conducting cryptocurrency scams, phishing attacks, and wallet draining operations. The Uni-App platform, a legitimate Chinese cross-platform development framewor
A critical privilege escalation vulnerability in Veeam Backup & Replication allows authenticated attackers to gain SYSTEM-level privileges on affected servers. The flaw, tracked as CVE-2025-23120, impacts multiple versions of the widely-deployed enterprise backup solution and could enable attackers
Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr
A critical zero-day vulnerability in Hitachi’s KnowledgeDeliver Learning Management System (LMS) is being actively exploited to deploy Godzilla webshells and Cobalt Strike beacons. Attackers are leveraging an authentication bypass flaw to gain unauthorized access, establish persistent backdoors, and
The U.S. Department of Justice has seized a Huione Cloud account linked to a massive cyber scam money laundering network operating across Southeast Asia. The enforcement action targets financial infrastructure used by organized crime syndicates to process proceeds from pig butchering scams, romance