A sophisticated threat actor known as PCPJack has compromised over 230 cloud servers across AWS, Google Cloud Platform, and Microsoft Azure to establish an underground SMTP relay network. The operation leverages misconfigured cloud instances and exposed credentials to transform legitimate infrastruc
Cisco has issued an urgent warning about an actively exploited zero-day vulnerability in its SD-WAN vManage software that allows unauthenticated attackers to execute arbitrary code remotely. The flaw, affecting multiple versions of vManage, is being weaponized in the wild before patches are availabl
A critical vulnerability in Microsoft Edge has been discovered that allows remote attackers to execute arbitrary code on victim systems through specially crafted web content. The flaw, affecting multiple versions of the Chromium-based browser, exploits a memory corruption issue in the browser’s rend
Dashlane, a prominent password manager, has disclosed that attackers successfully brute-forced two-factor authentication (2FA) protections to access and download encrypted password vaults belonging to specific users. While the downloaded vaults remain encrypted and require master passwords to decryp
Security researchers have discovered critical bypass techniques that defeat malicious skill detection systems deployed by ClawHub, Cisco, and Vercel. Attackers can now upload malicious AI skills and agents that evade scanning mechanisms designed to protect users from harmful AI behavior. The vulnera
HexStrike AI v6.0 has emerged as a comprehensive red team platform integrating 127 security tools with the BOAZ red team engine. This unified framework combines reconnaissance, exploitation, post-exploitation, and lateral movement capabilities into a single AI-driven interface. While marketed as a l
Pink Gang, a financially motivated threat actor group, has adopted the social engineering playbook pioneered by the notorious Lapsus$ collective. The group is now deploying fake helpdesk phone calls to trick employees into surrendering their credentials, combining old-school vishing (voice phishing)
Brave Software has launched Origin, a subscription-based browser that removes cryptocurrency wallets, AI features, and ads while maintaining core privacy protections. Priced at $4.99/month or $49.99/year, Origin targets users seeking a streamlined browsing experience without monetization schemes. Th
Cybercriminals are cloning legitimate cybersecurity tool websites—specifically Ghidra, dnSpy, and SpiderFoot—to distribute malware to security professionals and developers. These sophisticated clones mimic official sites and use typosquatting domains to trick victims into downloading trojanized vers
The Cybersecurity and Infrastructure Security Agency (CISA) is facing a substantial $250 million budget reduction following congressional appropriations decisions, sparking intense political debate between House Democrats and Republicans. This significant funding cut threatens to impact critical cyb