JetBrains has disclosed multiple critical vulnerabilities affecting its popular IDE products, including authentication bypass and remote code execution (RCE) flaws. These vulnerabilities impact TeamCity, YouTrack, and other JetBrains server products, potentially allowing attackers to gain unauthoriz
Organizations rapidly adopting AI tools face unprecedented data loss risks as employees inadvertently expose sensitive information through AI platforms. This guide provides actionable strategies to prevent AI-driven data leakage, including implementing data loss prevention (DLP) controls, establishi
Cybercriminals are systematically exploiting the operational gaps in enterprise vulnerability management programs rather than solely targeting unpatched systems. Recent threat intelligence reveals attackers focus on scanning windows, patch deployment delays, asset inventory blind spots, and prioriti
The OceanLotus APT group (APT32) has launched a sophisticated cyber-espionage campaign dubbed “FireAnt” targeting Vietnamese investors and financial sector entities. The operation leverages a newly identified backdoor malware called SPECTRALVIPER, delivered through weaponized documents disguised as
CISA adds Microsoft Exchange Server XSS vulnerability to KEV Catalog amid active exploitation. Federal agencies have a deadline—but all orgs should patch now.
Ivanti has disclosed a maximum severity vulnerability (CVE-2025-22457) in its Sentry product that allows unauthenticated attackers to execute arbitrary code with root privileges. The flaw affects Sentry versions 10.0.2 and earlier, carrying a CVSS score of 10.0. Organizations using Ivanti Sentry mus
Apple has released a firmware update addressing a critical vulnerability in Beats Studio Buds and Beats Studio Buds+ that allowed nearby attackers to hijack the microphone and eavesdrop on users. The flaw (CVE-2024-54537) affected the Bluetooth pairing process, enabling unauthorized access within Bl
A sophisticated phishing campaign is targeting Signal users, particularly journalists and activists, attempting to steal backup recovery keys that would grant attackers access to encrypted message histories. The attack leverages social engineering tactics mimicking official Signal communications, ex
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
Security researchers have disclosed ChatGPhish, a novel attack technique that exploits ChatGPT’s web browsing and content summarization features to conduct sophisticated phishing campaigns. By manipulating webpage content that ChatGPT accesses and summarizes, attackers can inject malicious instructi