Security Intelligence
China-linked threat actor breaches government networks with Trimble flaw
China-linked UAT-6382 observed exploiting critical vulnerability in Trimble's Cityworks software to infiltrate U.S....
Security Intelligence
Critical vulnerabilities in Versa Concerto at risk of exploitation
Researchers identify vulnerabilities in Versa Concerto including an RCE flaw that carries a maximum severity score of...
Security Intelligence
Russian APT28 targets Western firms supporting Ukraine
APT28 conducts cyber espionage campaign targeting Western logistics and technology companies.
Security Intelligence
Scattered Spider shifts focus to US targets
Scattered Spider shifts focus from UK retailers to targeting retail chains in the United States.
Security Intelligence
Russian APT28 hackers leverage webmail zero-day
APT28's Operation RoundPress targets webmail servers through cross-site scripting (XSS) vulnerabilities.
Security Intelligence
Second zero-day in SAP NetWeaver actively exploited
SAP addresses second zero-day vulnerability, identified as CVE-2025-42999, actively exploited in attacks.
Security Intelligence
ASUS patches RCE flaw in DriverHub utility
ASUS issues security updates for its DriverHub utility, addressing two critical vulnerabilities.
Security Intelligence
Apple patches significant flaws across various platforms
Apple releases significant security updates for iOS 18.5 and macOS platforms, addressing critical vulnerabilities.
Security Intelligence
New ‘Noodlophile’ infostealer disguised as AI video generator
Counterfeit AI video generation tools found distributing 'Noodlophile' malware strain.
Security Intelligence
PowerSchool clients now targeted directly by threat actor
PowerSchool breach threat actor now targeting individual school districts, threatening to publicly release sensitive...
Security Intelligence
‘TheWizards’ exploit IPv6 feature as part of AitM attacks
China-aligned threat actor TheWizards exploits IPv6 networking feature to hijack software updates and deploy malware.
Security Intelligence
New Apple zero-days go ‘AirBorne’
23 critical vulnerabilities, collectively named “AirBorne", found in Apple’s AirPlay technology,