Password spraying attacks have exploded by 155 times their previous volume, with threat actors systematically exploiting weaknesses in multi-factor authentication (MFA) implementations. Attackers are leveraging leaked credentials, targeting accounts with weak or missing MFA protections, and using so
A recent Microsoft Defender update intended to patch a zero-day vulnerability has inadvertently broken malware scanning functionality across Windows systems worldwide. The August 2024 security update, while addressing a critical exploit, has caused scan failures, incomplete threat detection, and sys
Cybercriminals are monetizing polite responses to wrong-number texts, selling validated phone numbers and victim profiles for approximately $2 each on dark web marketplaces. These seemingly innocent text exchanges serve as reconnaissance operations, allowing scammers to gather behavioral data, asses
Oracle has released its January 2025 Critical Patch Update (CPU) containing 943 security fixes across its product portfolio, including a critical remote code execution (RCE) vulnerability in WebLogic Server (CVE-2025-21587) with a CVSS score of 9.9. This flaw allows unauthenticated attackers to comp
Microsoft’s Threat Intelligence team has uncovered an extensive infrastructure network supporting MacSync, a sophisticated information-stealing malware targeting macOS systems. The research reveals over 30 rotating domains used by threat actors to distribute the stealer, exfiltrate stolen data, and
Adobe has disclosed multiple critical vulnerabilities in ColdFusion that allow remote attackers to execute arbitrary code on vulnerable servers. The flaws, affecting ColdFusion 2021 and 2023 versions, carry CVSS scores ranging from 7.5 to 9.8, with at least one vulnerability enabling unauthenticated
A UK criminal records office suffered a significant data breach due to an unpatched content management system (CMS) and systematically ignored security alerts. The incident exposed sensitive criminal records data, highlighting catastrophic failures in basic security hygiene. The breach stemmed from
CISA has added multiple SonicWall SMA1000 vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation by ransomware operators. The flaws affect SonicWall Secure Mobile Access (SMA) 1000 series appliances, enabling attackers to gain unauthorized access, execute
A dataset containing 9.2 million Israeli citizen records has surfaced on dark web marketplaces, marketed as a recent breach of Israel’s population registry. Investigation reveals this data originates from a 2005 compromise at Israel’s Population and Immigration Authority, making it nearly two decade
Progress Kemp LoadMaster application delivery controllers contain a critical vulnerability (CVE-2024-1212) now being actively exploited by threat actors. The flaw allows unauthenticated remote code execution with a CVSS score of 10.0, affecting multiple LoadMaster versions. Organizations running vul