Azure
TRENDING TOPICS JAN 21, 2026 Azure Private Endpoints Can Create Hidden Denial-of-Service Risk Palo Alto researchers have identified a design weakness in Azure Private Endpoint deployments that can unintentionally expose cloud resources to denial-of-service conditions. The issue stems from how Azure prioritizes Private DNS zones when a Private Endpoint is
Telegram
TRENDING TOPICS JAN 13, 2026 Hidden Telegram Proxy Links Enable One-Click IP Address Exposure Researchers have disclosed a Telegram client behavior that allows attackers to expose a user’s real IP address with a single click by abusing how MTProto proxy links are handled on mobile platforms. Specially crafted t[
UAT-7290
CVE-2026-0625 Critical D-Link DSL/DIR/DNS Devices AUTHENTICATION BYPASS UNAUTHENTICATED END-OF-LIFE Affects multiple end-of-life D-Link DSL, DIR, and DNS devices and allows an unauthenticated attacker to bypass authentication and modify DNS settings via the exposed dnscfg.cgi endpoint, enabling DNS hijacking and traffic redirection attacks. Critical Action: Immediately decommission and
Shai-Hulud
TRENDING TOPICS NOV 25, 2025 Round 2: Shai-Hulud Worm Exploits npm at Massive Scale The Shai-Hulud campaign has resurfaced with a far more aggressive, disruptive operation that has moved well beyond the smaller, account-level compromise seen in September. This round introduced a self-spreading worm that activated during package installation, enabling
AppleScript
CVE-2025-30398 Critical Nuance PowerScribe 360 INFO DISCLOSURE Information disclosure vulnerability exposing sensitive medical or system data to unauthorized users. CVE-2025-60716 Critical Windows DirectX Graphics Kernel PRIVILEGE ESCALATION Kernel-mode code execution via crafted graphics calls in DirectX Graphics Kernel subsystem. CVE-2025-62199 Critical Microsoft Office REMOTE CODE EXECUTION Crafted Office files trigger
Microsoft
TRENDING TOPICS OCT 30, 2025 Microsoft’s October Cloud Outage: Root Cause Identified On Wednesday, October 29, 2025, Microsoft experienced a significant global outage that began at approximately 16:00 UTC. The disruption affected both the Azure cloud platform and the Microsoft 365 business suite, leaving thousands of customers unable
EDR Freeze
TRENDING TOPICS SEPT 23, 2025 EDR-Freeze: User-Mode Technique That Freezes EDR Processes Researchers have discovered a method called EDR-Freeze that enables attackers to silently disable antivirus and endpoint detection tools without requiring the installation of a malicious driver or exploiting a major system flaw. Instead, it leverages a standard Windows
UAC-0057
CVE-2025-20265 Critical Cisco Secure Firewall Management Center COMMAND INJECTION Critical vulnerability in the RADIUS subsystem allows unauthenticated remote attackers to inject arbitrary shell commands during authentication, enabling high-privilege code execution. Exploitable only if FMC is configured to use RADIUS for web or SSH management. Mitigation: Apply Cisco patches immediately or