Adobe
TRENDING TOPICS AUGUST 06, 2025 Adobe Patches Vulnerabilities in AEM Forms After Public Exploit Disclosure Adobe has released emergency updates to fix two zero-day vulnerabilities in Adobe Experience Manager (AEM) Forms on JEE, following the POC release of a working exploit chain that enables unauthenticated RCE. The flaws, tracked as
Cisco
TRENDING TOPICS AUGUST 05, 2025 Cisco Data Breach Exposes User Information Through Vishing Attack Cisco has confirmed a data breach affecting users registered on Cisco[.]com after a threat actor successfully executed a voice phishing (vishing) attack on a company employee. The incident, discovered on July 24, involved unauthorized access
Proofpoint
TRENDING TOPICS AUGUST 04, 2025 Threat Actor Exploits Link-Wrapping Services to Deploy Microsoft 365 Phishing Campaign A highly targeted phishing campaign was uncovered, where a threat actor manipulated link-wrapping features from well-known providers Proofpoint and Intermedia to cloak malicious URLs directing victims to Microsoft 365 credential-harvesting pages. These services are
Monthly Wrap
MONTHLY WRAP MONTHLY WRAP Overview The threat landscape has shifted from high-noise attacks to sophisticated operations exploiting trust mechanisms and UI vulnerabilities. Key developments include TapTrap affecting 76% of Android apps, ASP[.]NET View State cryptographic attacks, weaponized AI coding agent hallucination
Microsoft OAuth
CVE-2025-5777 Critical Citrix NetScaler ADC/Gateway EXPLOITED IN WILD An out-of-bounds memory read vulnerability in NetScaler ADC and Gateway can expose sensitive data when used as a Gateway or AAA virtual server. This flaw has been actively targeted in the wild, making prompt remediation critical. Urgent Action Required: Citrix patched
SafePay
TRENDING TOPICS JULY 31, 2025 Update: SafePay Ransomware Group Claims Ingram Micro Breach SafePay ransomware operators have officially taken credit for the large-scale cyberattack on Ingram Micro, one of the world’s largest IT distribution companies, listing the firm on their leak site after weeks of silence. The group claims
CVE-2024-3400 Critical Palo Alto PAN-OS EXPLOITED BY SALT TYPHOON A command injection as a result of an arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root
Android
TRENDING TOPICS JULY 30, 2025 Chrome Vulnerability Impacts Multiple Platforms Including Apple Devices Google’s Threat Analysis Group (TAG) has identified CVE-2025-6558, a high-severity zero-day vulnerability (CVSS 8.8) affecting the Chrome browser’s ANGLE and GPU components. This flaw occurs when Chrome fails to properly check untrusted input from
Google Gemini
TRENDING TOPICS JULY 29, 2025 Gemini CLI Vulnerability Enables Silent Attacks Through Malicious Code Repos A vulnerability in Google’s Gemini CLI tool allowed attackers to silently run harmful commands on a developer’s machine by hiding instructions inside files, including README[.]md. This flaw was discovered by Tracebit just
ARC Platform
TRENDING TOPICS JULY 28, 2025 ARC Intelligence Portal Breach Compromises CIA-Linked Contractor Data The Acquisition Research Center (ARC), a key contracting portal used by the CIA and other U.S. intelligence agencies, was recently breached by unidentified hackers, resulting in the exposure of sensitive data tied to multiple high-level intelligence
Koske
CVE-2025-25257 Critical FortiClientEMS SQL injection vulnerability in FortiClientEMS versions 7.2.0–7.2.2 and 7.0.1–7.0.10, allowing unauthenticated attackers to perform SQL injection via crafted HTTP requests. Exploitation could lead to unauthorized access, data manipulation, or full system compromise in centralized endpoint management deployments.
ACRStealer
TRENDING TOPICS JULY 24, 2025 Update: ACRStealer Evolves into AmateraStealer with Advanced Evasion and C2 Techniques ACRStealer, an information-stealing malware that has been active since 2024, underwent significant enhancements in 2025, including upgrades to its stealth and command-and-control (C2) capabilities. Noted initially for abusing services like Google Docs and Steam