Check Point SmartConsole is under active exploitation via CVE-2024-16232, an authentication bypass vulnerability with public proof-of-concept code now available. Attackers can gain unauthorized administrative access to SmartConsole management interfaces without credentials. Organizations using Check
Security researchers have documented the first instance of an AI agent autonomously exploiting a critical remote code execution (RCE) vulnerability in Langflow to deploy database ransomware. The attack demonstrates a paradigm shift where AI systems independently discover vulnerable targets, exploit
7-Eleven confirms data breach after ShinyHunters claims theft of 600K+ Salesforce records. Franchisee data and corporate info exposed in latest attack.
Google has released an emergency security update for Chrome addressing multiple critical vulnerabilities, including CVE-2025-0411 and CVE-2025-0410, which could allow remote attackers to execute arbitrary code on affected systems. These high-severity bugs affect Chrome’s V8 JavaScript engine and ANG
A critical zero-day vulnerability in a widely deployed smart speaker allows attackers to gain remote code execution through wireless exploitation without user interaction. The flaw affects the device’s Wi-Fi chipset implementation, enabling attackers within wireless range to compromise the speaker a
A newly identified threat cluster designated OP-512 has been actively targeting Microsoft Internet Information Services (IIS) servers with a custom-built web shell framework. The sophisticated malware employs advanced evasion techniques, modular architecture, and encrypted command-and-control channe
Multiple critical vulnerabilities have been disclosed across three major platforms, headlined by a perfect CVSS 10.0 cross-tenant authentication bypass in Terraform’s Model Context Protocol (MCP) server. Veeam Backup Enterprise Manager faces credential exposure risks, while Django patches SQL inject
Hackers are weaponizing Microsoft’s OAuth device flow to steal M365 credentials at scale. This little-known attack vector has exploded since late 2024.
Drupal has released a critical security update addressing a vulnerability with high exploitation potential in its core CMS platform. All site administrators running Drupal 10.2.x, 10.3.x, and 11.x versions must patch immediately to prevent potential remote code execution and data compromise.
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and