Multiple zero-day vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) have been actively exploited in a chained attack scenario, allowing remote attackers to bypass authentication and execute arbitrary commands. These chained…
On May 14, 2025, UK retailer Marks & Spencer (M&S) was reportedly targeted in a ransomware attack claimed by the DragonForce group. The group posted on its darknet leak site…
A significant data breach exposes personal information and disclosed in May 2025 has resulted in the exposure of sensitive personal information belonging to hundreds of thousands of individuals. The breach…
In May 2025, security researchers uncovered a series of malicious Python packages on the Python Package Index (PyPI) that abuse the Gmail API to exfiltrate sensitive user data. These malicious…
Orca Security acquires Opus Security in a strategic move to transform its cloud-native application protection platform (CNAPP). This acquisition not only brings advanced remediation capabilities to Orca’s platform but also…
GitLab CVE-2022-2884 is a critical remote code execution vulnerability in GitLab Community and Enterprise Editions. Scoring 9.9 on the CVSS v3.1 scale, this flaw impacts all versions from 11.3.4 through…
Microsoft Patch Tuesday for May 2025 delivered security updates addressing 78 vulnerabilities, five of which are being actively exploited. Among these, the standout threat is a CVSS 10.0 rated vulnerability…
A critical Fortinet CVE-2025-32756 vulnerability was patched after being actively exploited in the wild. This zero-day, present in FortiVoice and potentially other Fortinet appliances, allows unauthenticated remote code execution (RCE)…
The Nucor cybersecurity incident has shaken the industrial sector, highlighting how targeted intrusions can halt production in critical infrastructure. As disclosed in an 8-K SEC filing, North America’s largest steel…
China-Nexus SAP NetWeaver exploitation campaigns are actively targeting global critical infrastructure by leveraging CVE-2025-31324, a high-severity vulnerability in SAP NetWeaver systems. The campaigns have drawn urgent attention across threat intelligence…
Hunting Jacq