A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS Business Manager Service, allowing local attackers to elevate privileges to SYSTEM level through improper client-side authentication. The flaw affects enterprise deployments of ASUS management software and could e
DentaQuest, a major dental benefits administrator, disclosed a significant data breach affecting approximately 2.6 million individuals. The incident compromised sensitive personal and health information, including names, addresses, dates of birth, Social Security numbers, and dental treatment record
Brazilian food delivery giant iFood confirmed a data breach affecting approximately 1.2 million users, exposing personal information including names, phone numbers, email addresses, and partial payment data. The incident represents one of the largest data exposures in Brazil’s food delivery sector,
CISA has added a critical Remote Code Execution (RCE) vulnerability in the Magento Cache Warmer module to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2024-34102, this critical flaw allows unauthenticated attackers to execute arbitrary code on vulnerable e-commerce platforms. Fe
Cisco has released security patches for CVE-2026-20230, a critical SQL injection vulnerability in Unified Communications Manager (UCM) with a CVSS score of 9.8. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries and potentially gain complete system control. With proof-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb
The United Nations World Food Programme (WFP) has confirmed a significant data breach affecting approximately 600,000 Palestinian households in Gaza. The incident exposed sensitive beneficiary information including names, identification numbers, and family details of individuals relying on humanitar
Phishing campaigns have undergone a significant tactical shift, with cybercriminals increasingly abandoning traditional fake login pages in favor of deploying infostealer malware directly. This evolution represents a more dangerous threat landscape where attackers prioritize persistent system access
eSIM technology is rapidly displacing traditional physical SIM cards, offering convenience and flexibility but introducing new attack surfaces. While eSIMs eliminate physical theft vulnerabilities, they create opportunities for remote exploitation, SIM swap attacks, and unauthorized profile provisio
The cybersecurity landscape is undergoing a seismic shift as artificial intelligence becomes weaponized by both attackers and defenders. Organizations face unprecedented challenges as AI-powered attacks evolve faster than traditional defenses can counter them. This transformation demands immediate a