Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr
The Court of Justice of the European Union (CJEU) has upheld a €4.1 billion antitrust fine against Google for abusing its Android market dominance. The ruling highlights serious concerns about Google’s control over user data access, app installation restrictions, and the security implications of its
A critical privilege escalation vulnerability in the Linux kernel’s CIFS (Common Internet File System) implementation has been discovered after hiding in plain sight for 19 years. Dubbed “CIFSwitch,” the flaw allows unprivileged users to gain root access through a race condition in filesystem switch
Gunra ransomware evolved from Conti roots into a full-scale RaaS operation, hitting dozens of orgs globally in under a year with leak sites and affiliate programs
A critical heap buffer overflow vulnerability (CVE-2026-42533) has been discovered in NGINX’s map directive regex processing that could allow remote code execution. The flaw affects NGINX versions prior to 1.26.2 and 1.27.1, potentially impacting millions of web servers worldwide. Organizations usin
A critical vulnerability (CVE-2026-55200) in libssh2, a widely-used SSH client library, has been publicly disclosed with a working proof-of-concept exploit available. The flaw allows malicious SSH servers to execute arbitrary code on connecting clients through memory corruption during the SSH handsh
A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
The RondoDox botnet is actively exploiting CVE-2018-5999, a six-year-old critical vulnerability in ASUS routers, to compromise devices and expand its network. This authentication bypass flaw allows attackers to execute arbitrary commands remotely, converting vulnerable routers into botnet nodes for
Dashlane, a prominent password manager, has disclosed that attackers successfully brute-forced two-factor authentication (2FA) protections to access and download encrypted password vaults belonging to specific users. While the downloaded vaults remain encrypted and require master passwords to decryp
The Handala hacking group has claimed responsibility for breaching California Water Service (Cal Water), one of the largest investor-owned water utilities in the United States. The group alleges exfiltration of sensitive data and threatens to release it publicly. This incident adds to growing concer