Cisco warns of ASA and FTD VPN flaw exploited to crash devices

A high-severity vulnerability in Cisco’s Secure Firewall ASA and Threat Defense (FTD) software has been exploited to remotely crash affected devices, according to a warning from the company. This flaw, tracked as CVE-2026-20349, impacts devices running specific versions of these software packages with certain remote access services enabled. The vulnerability allows an attacker to send … Read more

Sandworm hackers target IT pros with trojanized WireGuard VPN client

Sandworm Hackers Target IT Pros with Trojanized WireGuard VPN Client A sophisticated social engineering campaign attributed to the Russian threat group Sandworm has been targeting system administrators and IT professionals with fake job offers, leaving many wondering how these skilled hackers are able to breach even the most secure networks. The Ukrainian Computer Emergency Response … Read more

Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse

A massive blow has been dealt to cyber scammers and malicious actors who rely on unwanted notifications to spread their nefarious activities, with Google’s Chrome browser reducing over 7 billion such notifications per day on Android devices. According to a recent blog post by Google, these notifications have become a favored tool for scammers, used … Read more

DeadLock ransomware uses blockchain to resist infrastructure takedown

DeadLock Ransomware Takes Advantage of Blockchain to Evade Takedown The DeadLock ransomware operation has been making headlines for its innovative use of blockchain technology to protect its communication channels with victims, as well as its data-leak activity. The malware, which emerged in mid-2025, uses double-extortion tactics to pressure organizations into paying a hefty ransom. Victims … Read more

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client

Zoom Annotation Flaws Expose Users to Hijacking Threats, Experts Warn A critical vulnerability in Zoom’s annotation feature has been discovered, allowing a malicious meeting participant to take control of another attendee’s client. This flaw could lead to sensitive information exposure, unauthorized access, and even full account takeover. The issue lies in the way Zoom handles … Read more

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Kimwolf v7 Android Botnet Exploits HTTP/2 Loophole for Sophisticated DDoS Attacks A highly advanced Android botnet, Kimwolf v7, has been discovered exploiting a previously unknown vulnerability in the HTTP/2 protocol to launch complex Distributed Denial of Service (DDoS) attacks. The malware’s ability to mimic legitimate browsing traffic makes it extremely challenging to detect and mitigate. … Read more

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft has just released a massive patch update addressing an astonishing 398 vulnerabilities, including a critical Windows driver zero-day exploit that’s currently under active attack. This latest security fix is a testament to the ongoing cat-and-mouse game between tech giants and cyber threat actors. The sheer scale of this patch is a stark reminder that … Read more

Microsoft Plugs Nearly 400 Security Holes

Microsoft’s August Patch Tuesday delivered a massive 398 security updates for Windows operating systems and supported software. This is just one of several recent record-breaking patches from the tech giant, which has attributed its success in part to the use of artificial intelligence (AI) in vulnerability discovery. The sheer number of flaws patched this month … Read more

DeadLock ransomware uses blockchain to resist infrastructure takedown

DeadLock Ransomware Operators Use Blockchain to Evade Takedown Efforts, Expose 80 Organizations In a brazen display of cryptocurrency-fueled innovation, the DeadLock ransomware operation has leveraged blockchain technology to fortify its communication channels and data leak activities against disruption by law enforcement agencies. The threat actor, which emerged in mid-2025, employs double-extortion tactics – stealing sensitive … Read more

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client

Zoom Annotation Flaws Expose Users to Hijacking Risks A concerning vulnerability has been discovered in Zoom’s annotation feature, potentially allowing a meeting participant to take control of another attendee’s client and access their personal data. The issue affects all versions of the popular video conferencing platform, making it a pressing concern for users who rely … Read more