Cisco’s SD-WAN vManage software was actively exploited by threat actors for two months before the vendor publicly disclosed the critical vulnerability CVE-2025-20093. The flaw, carrying a CVSS score of 9.1, allows unauthenticated attackers to perform remote code execution. Organizations running affe
Over 30 Minnesota water utility systems have been targeted in a coordinated operational technology (OT) attack, marking one of the most significant cyber assaults on U.S. critical water infrastructure to date. The attack campaign specifically targeted industrial control systems (ICS) managing water
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These fraudulent “hacks” and “cracks” promise lifetime Premium access but instead install malicious software that harvests credentials, cryptocurrenc
Cybercriminals are distributing AsyncRAT malware through fraudulent Claude AI coding guides and PDF documents disguised as legitimate Anthropic resources. The campaign exploits growing interest in AI tools, particularly Claude’s coding capabilities, to trick developers and tech enthusiasts into down
Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro
The Texas Parks and Wildlife Department (TPWD) suffered a significant data exposure affecting approximately 3 million residents. The breach exposed sensitive personal information including names, addresses, dates of birth, Social Security numbers, and driver’s license numbers. The incident highlight
A lone threat actor successfully published 14 malicious npm packages designed to impersonate legitimate OpenSearch and Elasticsearch libraries. These typosquatting packages contained credential-harvesting code that targeted developers’ authentication tokens and environment variables. The malicious l
WhatsApp has introduced a username feature that allows users to connect without sharing their phone numbers. This privacy-focused update enables users to create unique identifiers for initiating conversations while keeping their actual phone numbers hidden from contacts. The feature addresses longst
Microsoft has significantly evolved its Cloud-Native Application Protection Platform (CNAPP) capabilities, aligning with industry-leading cloud security solutions. The enhancement consolidates multiple security tools into a unified platform, offering comprehensive visibility, risk assessment, and th
A critical SQL injection vulnerability in Ghost CMS is being actively exploited in a widespread ClickFix social engineering campaign. Attackers are compromising Ghost-powered websites to inject malicious scripts that display fake error messages, tricking users into executing PowerShell commands that