Security researchers have discovered critical vulnerabilities in Apple’s AirDrop and Google’s Quick Share file-sharing protocols that allow nearby attackers to trigger device crashes and denial-of-service conditions. These flaws exploit weaknesses in proximity-based sharing mechanisms, enabling mali
A sophisticated Windows backdoor dubbed “Mistic” has been discovered targeting enterprise networks with advanced in-memory code execution capabilities and credential harvesting features. The malware operates entirely in memory to evade traditional detection methods, establishes persistent command-an
Oracle E-Business Suite (EBS) is being actively targeted through CVE-2026-46817, a critical vulnerability allowing unauthenticated remote code execution. Attackers are exploiting this flaw in the wild to gain initial access to enterprise systems, deploy web shells, and establish persistence. Organiz
CISA has added a critical Microsoft Defender vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation by BlueHammer ransomware operators. The flaw (CVE-2025-21391) allows attackers to disable security protections, enabling ransomware deployment across enterpr
Apple released critical security updates addressing over 30 vulnerabilities across iOS, iPadOS, macOS, and Safari. The patches include several WebKit flaws discovered through AI-assisted vulnerability research, marking a significant milestone in automated security testing. Multiple vulnerabilities c
Microsoft has introduced a bot verification system for Teams meetings that acts as an authentication gatekeeper, requiring bots to present valid credentials before joining calls. This new access control mechanism addresses the growing security concern of unauthorized bots infiltrating corporate meet
Oracle E-Business Suite (EBS) is under active attack through CVE-2026-46817, a critical authentication bypass vulnerability with a CVSS score of 9.8. Attackers are exploiting unpatched instances to gain unauthorized administrative access, potentially compromising sensitive financial and business dat
A critical zero-day vulnerability in Oracle PeopleSoft (CVE-2026-35273) has been actively exploited in the wild, resulting in a confirmed data breach at Nissan. The unauthenticated remote code execution flaw affects PeopleSoft versions 9.2 and earlier, allowing attackers to bypass authentication and
The U.S. State Department has announced a $10 million bounty for information leading to the identification or location of members of two Russian cyber espionage groups, UNC5792 and UNC4221. These threat actors have conducted sophisticated campaigns targeting messaging applications and critical infra
The Djinn infostealer campaign is actively exploiting CVE-2024-48558, a critical path traversal vulnerability in SimpleHelp remote support software, to deploy sophisticated credential-harvesting malware. This operation specifically targets cloud service credentials, AI platform tokens, and enterpris