Chrome
Italian spyware vendor Memento Labs exploited Chrome zero-day CVE-2025-2783 in Operation ForumTroll, targeting Russian organizations with sophisticated LeetAgent malware. The attack demonstrates alarming advances in commercial surveillance capabilities and in browser sandbox-escape techniques.
News
X requires all users with hardware security keys to re-enroll them by November 10, 2025, to avoid account lockouts. Learn the steps, risks, and best practices to stay secure.
Microsoft
CVE-2025-59287 is a critical WSUS flaw in Windows Server that enables remote code execution. Exploitation is an active patch or disable WSUS immediately.
Cisco
Attackers are exploiting the Cisco SNMP vulnerability CVE-2025-20352 to deploy rootkits on Catalyst switches. Learn how the exploit works and how to mitigate it now.
Adobe
Hackers are actively exploiting CVE-2025-54236, a critical Magento SessionReaper vulnerability that enables customer session hijacking and data theft. Learn impact, IOCs, and how to patch fast.
Cybercrime
A PowerSchool data breach exposed 70 million student and teacher records. Hacker Matthew Lane was sentenced to four years in prison and ordered to pay $14 million.
Microsoft
Microsoft’s October 2025 Patch Tuesday delivers a record 175 security fixes, including two actively exploited zero-days and a critical ASP.NET Core vulnerability (CVE-2025-55315) with a CVSS 9.9 rating. This update also marks the end of support for Windows 10.
F5
F5 confirmed a nation-state actor stole BIG-IP source code and unreleased vulnerabilities. CISA mandates patching by Oct 31. Learn how to respond and secure affected systems.
ArcGIS
Flax Typhoon exploited Esri’s ArcGIS Server for over a year by installing a malicious extension that acted as a stealth backdoor. Learn how it worked and how to detect similar attacks.
Get the latest threat intelligence and security news direct to your inbox.
Windows 10 reached the end of support on October 14, 2025, ending all security updates. Learn how to protect your systems and stay compliant.
SonicWall confirms a MySonicWall cloud backup breach exposing firewall configurations. Learn how to check impact, remove exposed backups, and reset all credentials.
Cisco has patched CVE-2025-20265, a critical RCE flaw in Secure Firewall Management Center (CVSS 10.0). Learn who’s affected and how to protect your network now.
Cisco’s SNMP flaw (CVE-2025-20352) is under active attack, enabling device crashes or remote code execution. Patch now to protect critical IOS/IOS XE systems.
Actively exploited Cisco ASA/FTD zero-day enables unauthenticated RCE via VPN portal. Get affected versions, IOCs, and the fixed releases.
