A critical remote code execution (RCE) vulnerability in Redis allows unauthenticated attackers to achieve complete server compromise. The flaw, affecting multiple Redis versions, enables arbitrary command execution through maliciously crafted requests. Organizations running vulnerable Redis instance
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re
Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu
A critical authentication bypass vulnerability in HP Poly VoIP phones (CVE-2024-41937) allows unauthenticated attackers to gain administrative access to affected devices. With a CVSS score of 9.8, this flaw affects multiple Poly phone models widely deployed across enterprise environments. Attackers
Anthropic has launched Claude Fable 5, a new AI model available for a limited time period. This specialized model introduces unique capabilities that present both opportunities and security considerations for organizations. Security teams must understand the model’s architecture, assess potential at
The notorious cybercrime group ShinyHunters has leaked what appears to be Charter Communications customer data on a dark web forum, claiming to have exposed information on approximately 5 million customers. The dataset allegedly contains personal information including names, addresses, phone numbers
Governments worldwide are grappling with mounting security risks in open-source software ecosystems. Recent supply chain attacks, underfunded critical projects, and the sheer scale of dependency chains have exposed systemic vulnerabilities that traditional regulatory approaches cannot address. As na
Former Mesa County Clerk Tina Peters was convicted for her role in a significant election security breach that exposed sensitive voting system data. Despite facing legal consequences, Peters maintains her defiance and announces plans to continue fighting the charges. The case highlights critical vul
The FBI has seized the NetNut proxy service infrastructure, revealing its connection to the massive Popa botnet that compromised hundreds of thousands of devices worldwide. This operation exposes how legitimate-appearing proxy services can be weaponized through malware distribution, transforming uns
The University of Nottingham has confirmed a significant data breach affecting over 450,000 current and former students. The incident exposed sensitive personal information including names, contact details, and academic records. The breach highlights the growing vulnerability of educational institut