⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports that the China-linked ransomware group Warlock has attacked a water utility, a telecom provider, a regional government, and a university by exploiting SharePoint vulnerabilities. The attacks demonstrate the group's capability to target critical infrastructure and educational institutions using common software flaws.
This article describes a critical command execution vulnerability in GitLab's AI Gateway that impacts self-hosted deployments. The flaw allows authenticated users with specific access to run commands on the gateway server.
This article details a China-nexus espionage campaign that uses a new backdoor called Antino, which communicates through Microsoft 365's Outlook and OneDrive via Microsoft Graph. The campaign has targeted government and policy organizations across multiple Asian countries since September 2025, and is tracked as UAT-11587 by Cisco Talos.
This article reports multiple critical security flaws in Dell Container Storage Modules that could lead to full system compromise. The vulnerabilities include missing authentication, hard-coded credentials, and privilege escalation issues.
This article compares how Kiteworks and Citrix handled zero-day vulnerabilities, with one vendor ordering a shutdown and the other staying quiet until a patch was ready. The incidents illustrate the trade-offs between transparency and security in zero-day response.
This article warns that middleware vulnerabilities in SWIFT banking and government systems could allow remote code execution, potentially undermining hardware-based MFA. Immediate patching is urged to protect ultra-sensitive environments.