A newly discovered vulnerability in the Linux kernel is giving attackers the keys to the kingdom, allowing them to access and modify sensitive data on vulnerable systems. The flaw, which affects ARM64 virtual machines running under the Kernel-based Virtual Machine (KVM) hypervisor, enables malicious actors to bypass traditional security boundaries and gain read-write access to … Read more
Cybersecurity teams around the world are bracing themselves for a potentially catastrophic threat that has been lurking in the shadows, and it’s all about how attackers exploit identity exposure to gain unfettered access to sensitive systems. The DORA (Detect Observe Respond Act) framework is still reeling from its second year of implementation, and what’s become … Read more
A Critical Vulnerability in VeloCloud Orchestrator is Being Actively Exploited, Putting Certificate-Based Setups at Risk A newly discovered flaw in the VeloCloud Orchestrator has been assigned a CVSS (Common Vulnerability Scoring System) rating of 10.0, indicating that it’s one of the most severe vulnerabilities we’ve seen this year. This critical weakness is being actively exploited … Read more
A worrying trend has emerged in the world of cybersecurity, as threat actors have discovered a new way to breach even the most secure networks. By exploiting identity exposure, attackers are able to create active attack paths that allow them to move laterally within an organization’s infrastructure with unprecedented ease. This technique relies on mapping … Read more
A sophisticated spear-phishing campaign, attributed to a group known as SideCopy, has been discovered targeting Indian academia with a custom-made malware tool called ReverseRAT. This operation marks an expansion of the group’s activities, previously focused on India’s government and private sector institutions. SideCopy’s ReverseRAT malware allows the attackers to gain remote access to compromised systems, … Read more
A malicious npm package called indexed-btree has been removed from the official registry after it was found to be hiding its loader in runtime code. This sneaky tactic allowed the package to evade detection by security tools and inject malware into unsuspecting developers’ projects. The npm package, which had over 1,200 weekly downloads at the … Read more
Microsoft’s SharePoint platform has been plagued by a critical flaw that initially went undetected, allowing attackers to exploit authenticated remote code execution (RCE) capabilities. The issue, which was first listed as a spoofing vulnerability, has significant implications for organizations relying on the platform for collaboration and document management. The bug, tracked as CVE-2026-1234, resides in … Read more
A Critical Vulnerability in Linux Kernel Exposes ARM64 KVM Guests to Host Memory Attacks A newly discovered flaw in the Linux kernel has left thousands of users vulnerable to a potentially devastating attack. The vulnerability, which affects systems running on ARM64 architecture with Kernel-based Virtual Machine (KVM) enabled, allows malicious code executed within a virtual … Read more
As we mark the second anniversary of DORA, a critical security framework designed to help organizations fortify their defenses against sophisticated cyber threats, a growing body of evidence suggests that many Security Operations Centers (SOCs) are still struggling to see the attack in real-time. A new wave of research has uncovered 11 compelling case studies, … Read more
WordPress has just patched a critical vulnerability that could have allowed attackers to take control of websites without needing a login. Dubbed “Click2Shell,” this flaw was discovered by pwn.ai and affects all versions of WordPress from 4.7 upwards. The issue is with the way WordPress handles theme previews, which can be exploited using specially crafted … Read more