Vulnerabilities

The attackers gained access to code repositories and software build systems.  ​ Read More  ​ 

The company says there's no evidence of active exploitation of the flaws, or any modifications to its supply chain.  ​ Read More  ​ 

This is the last security release for Windows 10 as its official support ended on October 14.  ​ Read More  ​ 

The attackers are using emails, allegedly sent on behalf of the SBU, with the lure using the theme of countering Russian sabotage and reconnaissance groups.  ​ Read More  ​ 

In addition to the criminal charges, US and UK officials imposed sanctions on Chen and his businesses.  ​ Read More  ​ 

The campaign involves attackers using stolen, valid credentials to gain access, bypassing traditional brute-force methods.  ​ Read More  ​ 

This marks the first time when Flex Typhoon has been observed weaponizing ArcGIS's SOE feature.  ​ Read More  ​ 

Once executed, Stealit harvests data from web browsers, and from a wide range of apps like game platforms and marketplaces.  ​ Read More  ​ 

The proposed Cyber Forces would conduct cyber operations, gather intelligence, defend military networks, and build secure digital infrastructure.  ​ Read More  ​ 

The hackers said that the takedown would not impact their ongoing Salesforce campaign.  ​ Read More  ​ 

The malicious activity includes the RD Web Access timing attacks and RDP web client login enumeration.  ​ Read More  ​ 

The goal is to make the model to change behavior, for example, giving nonsense answers or breaking safety rules.  ​ Read More  ​ 

The GXC Team sold phishing kits, malware for Android devices, and voice scam tools.  ​ Read More  ​ 

In brief: GoAnywhere MFT zero-day exploited in ransomware attacks, threat actors are actively exploiting CVE-2025-11371 in Gladinet CentreStack and TrioFox, and more.  ​ Read More  ​ 

SonicWall is urging all users to log into their MySonicWall accounts to verify if their devices are at risk.  ​ Read More  ​