Threat Note

Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3.ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the "vulnerabilities are trivial to reverse and exploit." The list of identified flaws is as follows -

 Zoom, the popular video conferencing platform, has addressed several vulnerabilities across its suite of applications, ranging from privilege escalation to denial-of-service risks. These vulnerabilities, identified with distinct CVE IDs, highlight…

 Google has officially released Chrome 132 to the stable channel, bringing critical security updates and feature enhancements to users on Windows, macOS, and Linux. The update, version 132.0.6834.83/84, will be…

 Microsoft has disclosed a significant security vulnerability in its Windows Line Printer Daemon (LPD) service, tracked as CVE-2025-21224. This flaw could allow attackers to execute remote code on affected systems,…

In 2024, the Taiwanese government saw the daily average of attempted attacks by China double to 2.4 million, with a focus on government targets and telecommunications firms. Read More  

 Microsoft has disclosed a significant vulnerability in its Windows Remote Desktop Gateway (RD Gateway) that could allow attackers to exploit a race condition, resulting in a denial-of-service (DoS) attack. The…

 A critical security vulnerability affecting Fortinet’s FortiOS and FortiProxy systems has been actively exploited in the wild, allowing attackers to gain super-admin privileges. The flaw, tracked as CVE-2024-55591, is an…

Company has issued patches for an unprecedented 159 CVEs, including eight zero-days, three of which attackers are already exploiting. Read More  

The acquisition of Trelica accelerates 1Password's ongoing efforts to expand the role of the password manager with secure SaaS management Read More  

Emergent macOS vulnerability lets adversaries circumvent Apple's System Integrity Protection (SIP) by loading third-party kernels. Read More  

Two hacker groups were paid to develop malware targeting victims in the US, Europe, and Asia, as well as various Chinese dissident groups. Read More  

 Several significant security vulnerabilities have been identified and patched in PowerDNS, a widely used open-source nameserver known for its high performance, flexibility, and scalability. It serves as an alternative to traditional…

An ongoing campaign targeting FortiGate devices with management interfaces exposed on the public Internet is leading to unauthorized administrative logins and configuration changes, creating new accounts, and performing SSL VPN…

 Fortinet has released a security update with the fixes for 15 vulnerabilities that affect multiple products with distinct security issues, ranging from critical to high severity. Among the most severe…