Cybersecurity experts are sounding the alarm after a major ransomware group exploited two previously unknown vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances. The zero-day attacks have already compromised multiple enterprise networks, highlighting the critical need for prompt action to secure these devices. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, allow attackers to gain root-level … Read more
A New Windows Zero-Day Exploit Threatens Admin Privileges: What You Need to Know A critical security vulnerability has been discovered in Windows systems, allowing attackers to gain admin privileges and potentially wreak havoc on a compromised machine. The exploit, dubbed LegacyHive, was revealed by a security researcher known as Nightmare Eclipse just hours after Microsoft … Read more
The White House’s Gold Eagle Initiative Aims to Plug Security Gaps, but Implementation Details Remain Murky A new initiative launched by the White House has sparked both excitement and confusion in the cybersecurity community. The Gold Eagle clearinghouse, designed to coordinate vulnerability response in a world where large language models (LLMs) like Anthropic’s Claude Mythos … Read more
A Major Ransomware Group Exploits Critical Vulnerabilities in SonicWall Appliances In a disturbing development, hackers from the notorious Inc ransomware-as-a-service group have been exploiting two zero-day vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances. The security flaws, CVE-2026-15409 and CVE-2026-15410, allow attackers to gain root-level access to these devices, putting millions of users at risk. … Read more
Abbott Laboratories, a leading healthcare company, is investigating two separate cybersecurity incidents that have raised concerns about data breaches and extortion attempts. The company confirmed that unauthorized access was made to internal systems in its Cancer Diagnostics business, while also probing a second incident involving its LabCentral customer portal. At the center of the first … Read more
A recently discovered vulnerability in OpenSSL, a widely-used cryptographic library, could allow attackers to freeze server memory with just an 11-byte TLS request. The flaw, dubbed HollowByte, affects all versions of OpenSSL from 1.0.2 to 3.0 and has been patched in the latest update. The issue arises when an attacker sends a specially crafted TLS … Read more
A critical vulnerability has been discovered in WordPress core, allowing unauthenticated attackers to run arbitrary code on compromised sites. The flaw, identified as wp2shell, can be exploited without requiring any user credentials or authentication. This means that even if you have a secure password and up-to-date plugins, your site remains vulnerable to attack. The vulnerability … Read more
OpenSSL Servers Hit by Critical DoS Flaw, Leaving Them Permanently Bloated with Memory A severe denial-of-service (DoS) vulnerability has been discovered in OpenSSL, a widely-used library for secure internet communication. Dubbed HollowByte, this flaw allows unauthenticated attackers to trigger a condition that leaves affected servers permanently bloated with memory, rendering them unable to function. The … Read more
Abbott Laboratories is currently investigating two separate cybersecurity incidents that have raised concerns about unauthorized access to its internal systems and potential data breaches. The company has confirmed that it has been targeted by two different threat actors, who claim to have compromised sensitive information through various means. One of the incidents involves the ShinyHunters … Read more
A new wave of malicious npm packages, seven in total, has been discovered using blockchain-based command and control (C2) infrastructure to deliver a remote access Trojan (RAT). These compromised packages, hosted on the popular JavaScript library registry Vite, have been installed by unsuspecting developers worldwide. The revelation highlights the increasing sophistication and stealth of modern … Read more