3+ day, 6+ min ago   (436+ words) Threat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports. Tracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug…...

3+ day, 16+ hour ago   (429+ words) The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic. Fortinet on Tuesday released patches for 10 vulnerabilities across its products, including critical security defects. The first critical bug, tracked as CVE-2026-84390 (CVSS score of 9.6), is…...

3+ day, 20+ hour ago   (434+ words) Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or block. Future phishing campaigns may no longer involve a detectable physical web page. The attack flow…...

3+ day, 20+ hour ago   (401+ words) The Chrome update includes 230 security fixes, and users are advised to update their browsers as soon as possible. Google on Tuesday released Chrome 153 to the stable channel with patches for 230 vulnerabilities, including an exploited zero-day. Tracked as CVE-2026-87491, the medium-severity…...

4+ day, 15+ hour ago   (626+ words) Affecting the SAP kernel code, the flaw allows unauthenticated, remote attackers to run arbitrary commands, recover secrets, and modify data. SAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability. Tracked as…...

4+ day, 19+ hour ago   (570+ words) Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. Network equipment maker MikroTik has rolled out patches for six vulnerabilities in RouterOS, urging users to apply them as soon as possible, as two…...

5+ day, 18+ hour ago   (735+ words) The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance. North Korea-aligned threat actors have been using a new Linux toolkit in attacks targeting automotive and media organizations in South…...

5+ day, 18+ hour ago   (646+ words) The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients. Modified ScreenConnect clients are being used in an attack campaign to spread malicious payloads to other endpoints, cybersecurity firm Huntress warns. The worm-like attacks…...

1+ week, 1+ day ago   (383+ words) Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine. Google on Thursday rolled out fresh Chrome 152 security updates that resolve 12 vulnerabilities, including an exploited zero-day. Tracked as CVE-2026-85046, the high-severity bug is described as…...

1+ week, 3+ day ago   (737+ words) Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. Softaculous’ Virtualizor users were served malicious software updates for two days after a threat actor diverted internet traffic to attacker-controlled servers. A…...