A pair of critical vulnerabilities in widely used VPN certificates has been disclosed by Check Point, leaving thousands of organizations and individuals vulnerable to unauthenticated remote code execution (RCE) attacks. The severity of these flaws is underscored by their 9.8 rating on the Common Vulnerability Scoring System (CVSS), making them among the most critical issues … Read more
Google Play’s Early Access Feature Exploited by Malicious Actors, Thousands of Deceptive Apps Pushed onto Users A disturbing trend has emerged in the world of Android app development, where malicious actors have been exploiting Google Play’s Early Access feature to push thousands of deceptive apps onto unsuspecting users. These apps, masquerading as legitimate software, are … Read more
Cybersecurity researchers have uncovered a sophisticated exploit kit dubbed “BlueMoon” that has been used by multiple cyber-espionage groups to target Windows and Chrome users. The BlueMoon kit takes advantage of zero-day vulnerabilities in Chromium-based browsers, including Google Chrome, and Windows operating systems, making it a highly effective tool for attackers. The BlueMoon kit is a … Read more
Cybersecurity authorities have set a September 12 deadline for federal agencies and contractors to patch critical vulnerabilities in Cisco, Citrix, and Fortinet products. The move comes after the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that these flaws are being exploited by attackers, highlighting the need for swift action to prevent further breaches. The … Read more
Gigabud’s Android Work Profiles Expose Users to Banking App Malware Checks A disturbing trend has emerged in the world of mobile security, where a company called Gigabud is creating custom Android work profiles that can evade malware detection by banking apps. This revelation poses significant risks for users who rely on these apps for financial … Read more
A sophisticated cyber attack has been uncovered, involving hundreds of artificial intelligence agents and compromising over 440 instances of a popular print management software, PaperCut. The attackers exploited vulnerabilities in the software’s architecture, leveraging identity exposure to create active attack paths that have left many organizations vulnerable. The attack, which was reportedly carried out using … Read more
A Critical Vulnerability in Popular VPN Certificates Exposes Users to Remote Code Execution Attacks Check Point, a leading cybersecurity firm, has disclosed two high-severity vulnerabilities affecting popular virtual private network (VPN) certificates. These flaws, rated 9.8 out of 10 for severity, enable unauthenticated remote code execution (RCE), leaving millions of users vulnerable to cyber attacks. … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a critical vulnerability in WatchGuard Firebox firewalls that’s being exploited by ransomware gangs. This flaw, tracked as CVE-2025-14733, allows unauthenticated attackers to remotely execute malicious code with ease, putting countless organizations at risk. The vulnerability affects firewalls running Fireware OS 11.x and … Read more
In a welcome fix, Microsoft has resolved a known issue that reset mouse settings on some Windows 11 systems after installing the August preview update. The problem, which was confirmed by the company just days after its release, caused users to lose custom cursor personalization settings and animations. The issues affected non-English Windows installations, where … Read more
A leading artificial intelligence (AI) developer, Anthropic, has disclosed its fourth hacking incident in recent months, with the latest attack targeting its Claude Opus 4.6 system. This vulnerability highlights a growing concern about AI systems being compromised and used as launchpads for sophisticated cyber attacks. The incident involved an unauthorized access to Anthropic’s AI infrastructure, … Read more