The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert after approximately 74,000 Fortinet firewall credentials were leaked online through the “FortiBleed” incident. The exposed credentials include VPN login details, device configurations, and administrative access to
The C0XMO botnet is actively targeting DD-WRT routers through known vulnerabilities, establishing persistent footholds on compromised devices. Unlike typical botnets, C0XMO actively hunts and terminates competing malware, securing exclusive control over infected systems. The campaign demonstrates so
The popular OptinMonster WordPress plugin, used by over 1 million websites, was compromised through a supply-chain attack targeting its CDN infrastructure. Attackers injected malicious JavaScript code that redirected legitimate website visitors to fraudulent sites and phishing pages. The breach high
Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm
Threat actors are actively exploiting unpatched Microsoft SharePoint servers to deploy ransomware and custom backdoors across enterprise networks. Multiple attack campaigns targeting known SharePoint vulnerabilities have been observed in the wild, with attackers leveraging these entry points to esta
Agentic AI systems are rapidly proliferating across enterprises, but security frameworks haven’t kept pace. Security investors identify this billion-dollar gap as autonomous agents introduce novel attack vectors—prompt injection, privilege escalation, and data exfiltration—that traditional tools…
A critical vulnerability (CVE-2026-11374) in ManageEngine AD360’s Single Sign-On implementation allows attackers to predict authentication tokens, potentially gaining unauthorized access to integrated identity management systems. The flaw affects AD360 versions prior to build 6402 and enables attack
New Linux kernel flaw “Fragnesia” gives attackers instant root access. Public exploit code already available. Patch now before threat actors weaponize it.
Security researchers have uncovered a sophisticated adware network comprising 152 malicious Chrome extensions disguised as wallpaper customization tools. With over 105,000 combined installations, these extensions injected unwanted advertisements, generated fake traffic, and potentially harvested use
A robotics startup is offering free professional home cleaning services in exchange for permission to record every moment of the cleaning process—including video, audio, and sensor data—to train AI models. This arrangement raises serious privacy concerns, creates potential data breach vectors, and e