Category: CyberSecurityNews

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege
11
Nov
2025

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege

A security vulnerability has been discovered in Zoom Workplace VDI Client for Windows that could allow attackers to gain elevated…

Share: X : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeFacebook : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeLinkedin : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeReddit : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeTelegram : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeWhatsApp : Zoom Workplace for Windows Vulnerability Allow Users to Escalate PrivilegeEmail : Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege
WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH Access
11
Nov
2025

WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH Access

A critical vulnerability in WatchGuard Firebox firewalls could allow attackers to gain complete administrative access to the devices without any…

Share: X : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessFacebook : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessLinkedin : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessReddit : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessTelegram : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessWhatsApp : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH AccessEmail : WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH Access
65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHub
11
Nov
2025

65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHub

A new security investigation reveals that 65% of prominent AI companies have leaked verified secrets on GitHub, exposing API keys,…

Share: X : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubFacebook : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubLinkedin : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubReddit : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubTelegram : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubWhatsApp : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHubEmail : 65% of Leading AI Companies Exposes Verified Secrets Including Keys and Tokens on GitHub
Threat Actors Attacking Outlook and Google Bypassing Traditional Email Defenses
11
Nov
2025

Threat Actors Attacking Outlook and Google Bypassing Traditional Email Defenses

Email-based threats have reached a critical inflection point in the third quarter of 2025. Threat actors are systematically exploiting weaknesses…

Share: X : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesFacebook : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesLinkedin : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesReddit : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesTelegram : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesWhatsApp : Threat Actors Attacking Outlook and Google Bypassing Traditional Email DefensesEmail : Threat Actors Attacking Outlook and Google Bypassing Traditional Email Defenses
Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session Data
11
Nov
2025

Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session Data

Zoom has issued multiple security bulletins detailing patches for several vulnerabilities affecting its Workplace applications. The disclosures, published today, highlight…

Share: X : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataFacebook : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataLinkedin : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataReddit : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataTelegram : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataWhatsApp : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session DataEmail : Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session Data
Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus Feature
11
Nov
2025

Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus Feature

Google Mandiant has disclosed active exploitation of CVE-2025-12480, a critical unauthenticated access vulnerability in Gladinet’s Triofox file-sharing platform. The threat cluster…

Share: X : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureFacebook : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureLinkedin : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureReddit : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureTelegram : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureWhatsApp : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus FeatureEmail : Hackers Exploiting Triofox 0-Day Vulnerability to Execute Malicious Payload Abusing Anti-Virus Feature
SAP Security Update - Patch for Critical Vulnerabilities Allowing Code Execution and Injection Attacks
11
Nov
2025

SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection Attacks

SAP released its monthly Security Patch Day updates, addressing 18 new security notes and providing two updates to existing ones,…

Share: X : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksFacebook : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksLinkedin : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksReddit : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksTelegram : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksWhatsApp : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection AttacksEmail : SAP Security Update – Patch for Critical Vulnerabilities Allowing Code Execution and Injection Attacks
CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks
11
Nov
2025

CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks

CISA has added a critical zero-day vulnerability affecting Samsung mobile devices to its Known Exploited Vulnerabilities catalog. Warning that threat…

Share: X : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksFacebook : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksLinkedin : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksReddit : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksTelegram : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksWhatsApp : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in AttacksEmail : CISA Warns of Samsung Mobile Devices 0-Day RCE Vulnerability Exploited in Attacks
Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce Ransomware
11
Nov
2025

Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce Ransomware

A sophisticated wave of ransomware attacks targeting UK organizations has emerged in 2025, exploiting vulnerabilities in the widely-used SimpleHelp Remote…

Share: X : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareFacebook : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareLinkedin : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareReddit : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareTelegram : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareWhatsApp : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce RansomwareEmail : Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce Ransomware
Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEO
10
Nov
2025

Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEO

Cybercriminals are increasingly targeting websites to inject malicious links and boost their search engine optimization rankings through sophisticated blackhat SEO…

Share: X : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOFacebook : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOLinkedin : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOReddit : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOTelegram : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOWhatsApp : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEOEmail : Threat Actors Actively Hacking Websites to Inject Malicious Links and Boost their SEO
Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case
10
Nov
2025

Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case

Francesco Nicodemo, a prominent political communications strategist and former Democratic Party communications director, has been identified as a new target…

Share: X : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseFacebook : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseLinkedin : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseReddit : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseTelegram : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseWhatsApp : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance CaseEmail : Italian Adviser Becomes Latest Target in Expanding Paragon Graphite Spyware Surveillance Case
APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins
10
Nov
2025

APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins

The construction industry has emerged as a lucrative target for advanced persistent threat groups and organized cybercriminal networks seeking unauthorized…

Share: X : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsFacebook : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsLinkedin : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsReddit : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsTelegram : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsWhatsApp : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix LoginsEmail : APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins