Chinese hackers have been exploiting vulnerabilities in popular technologies such as WordPress and ZyXEL switches to steal sensitive government data from thousands of devices worldwide. The hacking campaign, attributed to a threat actor linked to the Red Heron group, has compromised at least 49 organizations across 29 countries, with many more potentially affected. The attackers … Read more
Sweden Fines IT Firm $183,000 Over Massive Data Breach Affecting 2.2 Million People A Swedish software company that provides work environment and HR management systems to municipal authorities has been slapped with a hefty fine of $183,000 for inadequate security measures that led to a massive data breach last year. The incident exposed sensitive information … Read more
A Rogue External MFA Provider Can Steal Passwords During Legitimate Logins Security researchers have developed an attack that allows hackers with privileged access to steal passwords from users during legitimate login attempts. The technique, dubbed TrustSink by Varonis Threat Labs, works by registering a rogue external Multi-Factor Authentication (MFA) provider as a trusted third-party authentication … Read more
A Zero-Day Vulnerability in Microsoft Defender Exposes Millions to Malware Attacks A researcher has publicly released a proof-of-concept (PoC) exploit for a zero-day vulnerability in Microsoft’s Defender antivirus software, which could allow attackers to block critical security updates. The exploit, called BigDiskBuster, targets the Windows operating system and affects millions of users worldwide who rely … Read more
A Critical Flaw in Bifrost AI Gateway Software Allows Unauthenticated Attackers to Execute Commands, Putting Organizations at Risk of Breach A severe vulnerability has been discovered in the Bifrost AI Gateway software, allowing attackers to execute arbitrary commands on vulnerable systems without the need for credentials. The flaw, which affects multiple versions of the software, … Read more
Microsoft has taken down a notorious device-code phishing service called EvilTokens, which was linked to a staggering 12,000 compromised inboxes. This marks a significant victory for the tech giant and its efforts to combat cyber threats. But what exactly is EvilTokens, and why does it matter? EvilTokens was a sophisticated phishing operation that exploited a … Read more
A malicious npm package has been discovered posing as a Twilio bug-bounty probe, allowing attackers to exfiltrate sensitive credentials from unsuspecting developers. This latest threat highlights the ongoing risks of supply chain attacks and underscores the importance of exercising caution when installing third-party libraries. The compromised package, which we’ll refer to as “Twilio-Proxy,” was masquerading … Read more
Critical WordPress Flaw Patched, but What Does it Mean for Your Site’s Security? A critical vulnerability in the popular content management system (CMS) WordPress has been patched by its developers. The flaw, identified as CVE-2026-1234, could have enabled malicious actors to execute arbitrary code on vulnerable servers, potentially leading to data breaches and other security … Read more
A Zero-Day Exploit in Check Point’s Management Servers Compromises High-Security Networks A targeted attack on high-security networks has been uncovered, exploiting a previously unknown vulnerability in Check Point’s management servers. The severity of this incident lies not only in the fact that it represents a zero-day exploit but also in its potential to compromise even … Read more
A Critical Flaw in Bifrost AI Gateway Exposes Organizations to Privilege Escalation Attacks A severe vulnerability has been discovered in the Bifrost AI gateway, a critical component of many organizations’ security infrastructure. The flaw allows attackers to bypass authentication and run arbitrary commands on the system, effectively granting them administrative privileges. This critical weakness puts … Read more