Cisco has released emergency patches for a critical authentication bypass vulnerability (CVE-2024-20272) in Unified Communications Manager (Unified CM) with a CVSS score of 9.8. Public exploit code is now circulating, enabling unauthenticated attackers to execute arbitrary commands with root privile
Security researchers have disclosed a critical 0-click exploit chain targeting Google Pixel 10 devices that achieves root access through vulnerabilities in the Visual Processing Unit (VPU). The attack requires no user interaction, can be triggered remotely through malicious media files, and grants a
A critical vulnerability in Microsoft Edge has been discovered that allows remote attackers to execute arbitrary code on victim systems through specially crafted web content. The flaw, affecting multiple versions of the Chromium-based browser, exploits a memory corruption issue in the browser’s rend
A sophisticated Chinese threat actor has deployed Atlas RAT, a previously unknown remote access trojan, targeting organizations across multiple European nations. The malware features advanced persistence mechanisms, encrypted command-and-control communications, and modular capabilities designed to e
A financial institution operated with untested security controls for nearly a year, exposing critical banking infrastructure to potential exploitation. The incident highlights systemic failures in vulnerability management programs, where security testing gaps created an unknown risk exposure window.
Cybercriminals are leveraging weaponized LNK files and PowerShell scripts to deliver NarwhalRAT, a remote access trojan capable of extensive system compromise. The attack chain begins with malicious shortcut files that trigger PowerShell commands, ultimately deploying a Python-based loader to establ
Cybercriminals are distributing cryptojacking malware through counterfeit utility software websites, bundling legitimate remote access tool ScreenConnect with cryptocurrency miners. The campaign targets users searching for popular system utilities, redirecting them to malicious domains that deliver
Palo Alto Networks has issued an urgent warning about active exploitation of CVE-2024-0257, a critical VPN bypass vulnerability in PAN-OS. The flaw allows unauthenticated attackers to bypass authentication mechanisms in GlobalProtect VPN implementations, potentially granting unauthorized network acc
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
GitHub experienced a major global outage that brought critical CI/CD pipelines to a halt across thousands of organizations. The incident affected GitHub Actions, GitHub Pages, API services, and repository access, leaving development teams unable to deploy code, run automated tests, or access version