CISA and the NSA have jointly released “Microsoft Exchange Server Security Best Practices,” a guide to help organizations harden on-premises […]
CISA & NSA Release Hardening Guide for On-Premises Microsoft Exchange Read More »
A critical unauthenticated arbitrary file upload vulnerability (CVE-2025-5678, CVSS 9.8) has been found in the FormCraft Pro WordPress plugin, installed
Critical Vulnerability in Popular WordPress Plugin “FormCraft Pro” Allows Site Takeover Read More »
The Iranian state-sponsored group Charming Kitten (aka APT35, Phosphorus) has been observed deploying a previously unseen backdoor named “GhostEcho.” The
Iranian APT “Charming Kitten” Uses New Backdoor in Espionage Campaigns Read More »
A new ransomware variant named “DataViper” has emerged, specifically scanning the internet for and targeting publicly exposed, misconfigured databases (like
New “DataViper” Ransomware Targets Misconfigured Databases Read More »
Threat actors are using real-time AI voice modification and deepfake audio to bypass voice biometric authentication and trick human agents
AI-Powered Vishing Attacks Bypass Traditional Call Center Security Read More »
Atlassian released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-9115, CVSS 9.8) affecting Confluence Data Center and
Critical Atlassian Confluence RCE Flaw (CVE-2025-9115) Under Active Exploit Read More »
What Happened? A major international telecommunications provider is actively investigating claims made on a dark web forum alleging a massive
Major Telecom Provider Investigating Massive Customer Data Leak Claim Read More »
What Happened? CISA has added a high-severity vulnerability (CVE-2025-7034) affecting GitLab Runner to its Known Exploited Vulnerabilities (KEV) catalog. The
CISA Adds GitLab Runner Flaw (CVE-2025-7034) to KEV Catalog Read More »
What Happened? A new variant of the prolific LockBit ransomware has been observed incorporating self-propagating “worm” capabilities. Once it compromises
LockBit Ransomware Variant Incorporates Network Worm Capabilities Read More »
What Happened? Microsoft released out-of-band patches for a critical zero-day vulnerability (CVE-2025-4421) in Exchange Server. The flaw, a server-side request
Critical Zero-Day in Microsoft Exchange Exploited for Data Theft (CVE-2025-4421) Read More »
