Nissan Motor Corporation disclosed a significant data breach affecting employee information after threat actors exploited a zero-day vulnerability in Oracle PeopleSoft. The automotive giant confirmed that unauthorized access occurred through their HR management system, compromising sensitive employe
Russian authorities continue using Cellebrite’s mobile forensic tools to extract data from activists’ devices despite the Israeli company’s contract termination. A recent case involving a human rights activist demonstrates that Russia’s existing stockpile of Cellebrite equipment remains operational,
Critical Exchange Server spoofing flaw under active attack. CVE-2026-42897 affects on-premise versions with CVSS 8.1. Patch immediately if you’re running 2016/2019.
Security researchers have discovered critical remote code execution (RCE) vulnerabilities in Cursor IDE, a popular AI-powered code editor. These flaws enable attackers to execute arbitrary code through zero-click prompt injection attacks, potentially compromising developer workstations without any u
Automated License Plate Readers (ALPRs) have evolved beyond capturing vehicle information to now tracking mobile devices, creating unprecedented surveillance capabilities. Modern ALPR systems integrate Bluetooth, WiFi, and cellular signal detection to link vehicles with phone MAC addresses and devic
Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr
A critical vulnerability in Palo Alto Networks’ PAN-OS operating system allows authenticated attackers to execute arbitrary commands with root privileges on affected firewalls. The flaw, which affects multiple PAN-OS versions, poses a significant threat to enterprise networks relying on these widely
Inc ransomware operators are actively exploiting two zero-day vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances to gain root-level access to enterprise networks. The critical flaws, identified as CVE-2025-23006 and CVE-2025-23007, affect SMA 100 series devices running firmware ver
DentaQuest, a major dental benefits administrator, disclosed a significant data breach affecting approximately 2.6 million individuals. The incident compromised sensitive personal and health information, including names, addresses, dates of birth, Social Security numbers, and dental treatment record
Chinese AI company Zhipu AI has released GLM-5.2, claiming performance comparable to Anthropic’s Claude in identifying security vulnerabilities. This development signals a significant shift in the AI-powered security landscape, as state-backed Chinese models potentially match Western capabilities in