A Major Ransomware Group Exploits Critical Vulnerabilities in SonicWall Appliances In a disturbing development, hackers from the notorious Inc ransomware-as-a-service group have been exploiting two zero-day vulnerabilities in SonicWall’s Secure Mobile Access (SMA) appliances. The security flaws, CVE-2026-15409 and CVE-2026-15410, allow attackers to gain root-level access to these devices, putting millions of users at risk. … Read more
Abbott Laboratories, a leading healthcare company, is investigating two separate cybersecurity incidents that have raised concerns about data breaches and extortion attempts. The company confirmed that unauthorized access was made to internal systems in its Cancer Diagnostics business, while also probing a second incident involving its LabCentral customer portal. At the center of the first … Read more
A recently discovered vulnerability in OpenSSL, a widely-used cryptographic library, could allow attackers to freeze server memory with just an 11-byte TLS request. The flaw, dubbed HollowByte, affects all versions of OpenSSL from 1.0.2 to 3.0 and has been patched in the latest update. The issue arises when an attacker sends a specially crafted TLS … Read more
A critical vulnerability has been discovered in WordPress core, allowing unauthenticated attackers to run arbitrary code on compromised sites. The flaw, identified as wp2shell, can be exploited without requiring any user credentials or authentication. This means that even if you have a secure password and up-to-date plugins, your site remains vulnerable to attack. The vulnerability … Read more
OpenSSL Servers Hit by Critical DoS Flaw, Leaving Them Permanently Bloated with Memory A severe denial-of-service (DoS) vulnerability has been discovered in OpenSSL, a widely-used library for secure internet communication. Dubbed HollowByte, this flaw allows unauthenticated attackers to trigger a condition that leaves affected servers permanently bloated with memory, rendering them unable to function. The … Read more
Abbott Laboratories is currently investigating two separate cybersecurity incidents that have raised concerns about unauthorized access to its internal systems and potential data breaches. The company has confirmed that it has been targeted by two different threat actors, who claim to have compromised sensitive information through various means. One of the incidents involves the ShinyHunters … Read more
A new wave of malicious npm packages, seven in total, has been discovered using blockchain-based command and control (C2) infrastructure to deliver a remote access Trojan (RAT). These compromised packages, hosted on the popular JavaScript library registry Vite, have been installed by unsuspecting developers worldwide. The revelation highlights the increasing sophistication and stealth of modern … Read more
A newly discovered vulnerability in OpenSSL, a widely-used cryptographic library, has the potential to freeze server memory with carefully crafted TLS requests. The issue, dubbed “HollowByte,” affects systems using OpenSSL 3.x and can be exploited by attackers sending 11-byte TLS messages. This flaw poses a significant threat to organizations that rely on secure online transactions, … Read more
A newly discovered flaw in WordPress core, dubbed “wp2shell,” allows unauthenticated attackers to inject and run malicious code on affected websites. The vulnerability is particularly concerning because it can be exploited without needing any login credentials or exploiting a separate vulnerability first. As a result, millions of WordPress users are at risk of falling victim … Read more
A recent high-profile attack has exposed a growing risk in enterprise cybersecurity: the vulnerability of artificial intelligence (AI) systems to “authority laundering.” This process occurs when an AI intermediary transforms untrusted input into seemingly trusted internal instructions, allowing attackers to bypass traditional security measures. The incident serves as a warning sign for IT leaders as … Read more