exploits

The models provided the correct URL only 66% of the time; nearly 30% of responses pointed users to dead or suspended domains.  ​ Read More  ​ 

ANSSI believes that the Houken campaign is operated by ‘UNC5174’, an entity believed to act as an initial access broker for China’s Ministry of State Security.  ​ Read More  ​ 

The malicious actors used v0.dev to create fake login pages mimicking legitimate brands.  ​ Read More  ​ 

Attackers accessed and exfiltrated data from the compromised platform.  ​ Read More  ​ 

The sanctions target Aeza Group’s parent entity, subsidiaries, and four individuals linked to the company’s leadership and operations.  ​ Read More  ​ 

Recent months have seen a notable uptick in activity from Iranian-linked hacktivists and government-affiliated threat groups.  ​ Read More  ​ 

The flaw, tracked as CVE-2025-6554, is described as a type confusion bug in Chrome's V8 JavaScript and WebAssembly engine.  ​ Read More  ​ 

From now on, all federal departments, agencies, and Crown corporations are prohibited from purchasing Hikvision products.  ​ Read More  ​ 

As part of the action, the US authorities unsealed two indictments, arrested a suspect, conducted searchers across 16 states at nearly 30 known or suspected “laptop farms.”  ​ Read More  ​ 

The organization says the decision to discontinue expiration emails is driven by rising operational costs, increasing privacy concerns, and efforts to simplify its infrastructure.  ​ Read More  ​ 

V1.3 comes with expanded ability to exfiltrate a wide range of sensitive files.  ​ Read More  ​ 

The Guardia Civil arrested five individuals who are believed to be key members of the international criminal network.  ​ Read More  ​ 

The group relies on social engineering tactics, often impersonating employees or contractors to trick IT help desks into granting unauthorized access.  ​ Read More  ​ 

In brief: Citrix patched actively exploited NetScaler vulnerability, malicious actors increasingly target MOVEit Transfer systems, and more.  ​ Read More  ​ 

The cyberattack disrupted pathology services and led to over 10,000 cancelled appointments across hospitals and GP surgeries in south-east London.  ​ Read More  ​