A critical remote code execution (RCE) vulnerability in ServiceNow, tracked as CVE-2024-6875, is now being actively exploited by threat actors. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable ServiceNow instances, affecting multiple versions of the platform. Organiz
AI-generated Holocaust imagery is rewriting history in real-time. The distortion of documented atrocities through synthetic media poses grave risks to truth.
Cisco SD-WAN infrastructure is being actively exploited through a newly discovered zero-day vulnerability with no patch currently available. Threat actors are targeting management interfaces to gain unauthorized access to enterprise networks. Organizations running Cisco SD-WAN must implement immedia
Anthropic’s AI assistant Claude experienced a significant service outage coinciding with the company’s highly anticipated stock market debut. The disruption affected thousands of users globally, preventing access to Claude’s web interface, API services, and mobile applications for several hours. Whi
A newly disclosed HTTP/2 vulnerability dubbed “HTTP/2 Bomb” enables attackers to trigger severe resource exhaustion on major web servers including nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora through a single malicious request. The attack leverages HTTP/2’s HPACK header compress
Google has released Gemini 3.5 Flash with computer use capabilities that enable autonomous AI agents to interact directly with systems, applications, and interfaces. While these features unlock powerful automation possibilities, they introduce significant security risks including unauthorized system
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb
The United Kingdom has established an advisory board to oversee and challenge its developing digital identity infrastructure. This board comprises cybersecurity experts, privacy advocates, and technology leaders tasked with ensuring the digital ID program balances innovation with robust security and
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
International law enforcement agencies have successfully disrupted the SocGholish botnet infrastructure operated by the notorious Evil Corp cybercrime group. The operation dismantled command-and-control servers responsible for distributing fake browser updates that infected thousands of systems worl