Adobe Acrobat emergency update addresses prototype pollution zero-day exploited since 2025
A critical prototype pollution vulnerability in the world most popular PDF reader was weaponized months before its public disclosure. This
New ATHR cybercrime platform automates voice phishing via high-fidelity AI agents
A professionalized vishing-as-a-service platform is utilizing AI voice synthesis to automate credential harvesting at an industrial scale. This platform removes
New ATHR cybercrime platform automates voice phishing via high-fidelity AI agents Read More »
CISA remediation deadline today for critical Fortinet FortiClient EMS SQL injection
Unauthenticated attackers are actively weaponizing a critical SQL injection flaw in your endpoint management infrastructure to execute unauthorized code. Today
CISA remediation deadline today for critical Fortinet FortiClient EMS SQL injection Read More »
Adobe Reader zero-day CVE-2026-34621 confirmed active in wild since November 2025
A critical prototype pollution vulnerability in the world most popular PDF reader was weaponized months before its public disclosure. This
Adobe Reader zero-day CVE-2026-34621 confirmed active in wild since November 2025 Read More »
CISA adds legacy Microsoft Office Excel RCE to KEV following ransomware precursor use
A 17-year-old remote code execution vulnerability in the Microsoft Office Excel engine has been resurfaced for use in modern ransomware
CISA adds legacy Microsoft Office Excel RCE to KEV following ransomware precursor use Read More »
Microsoft patches BlueHammer Windows Defender privilege escalation bug after exploit leak
A high-severity privilege escalation vulnerability in the Windows security subsystem has been patched following the public release of functional exploit
Microsoft SharePoint Server zero-day CVE-2026-32201 exploited for trusted content spoofing
Attackers are actively exploiting a critical spoofing vulnerability in Microsoft SharePoint Server to falsify internal communications and facilitate social engineering
Microsoft Visual Basic VBA insecure library loading flaw added to CISA KEV
A legacy vulnerability in the Microsoft Visual Basic for Applications engine is being resurfaced by threat actors to achieve unauthorized
Microsoft Visual Basic VBA insecure library loading flaw added to CISA KEV Read More »
React2Shell campaign exploits Next.js RCE for automated cloud harvesting
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign exploits Next.js RCE for automated cloud harvesting Read More »
Adobe patches critical Acrobat and Reader zero-day exploited since 2025
A critical prototype pollution vulnerability in the world most popular PDF reader has been active in the wild for several
Adobe patches critical Acrobat and Reader zero-day exploited since 2025 Read More »
