VMware has patched four critical zero-day vulnerabilities in ESXi, Workstation, Fusion, and Tools products that were exploited at Pwn2Own Berlin 2025. Three vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238) carry 9.3 severity ratings and enable virtual machine escape attacks...
Microsoft is resolving a DNS configuration issue preventing some Exchange Online users from receiving one-time passcodes needed to access encrypted emails. The problem affects users whose email systems perform DNS verification checks, disrupting access to encrypted content through the Offi...
Citrix warns that recent security patches for NetScaler ADC and Gateway appliances may cause login page failures due to Content Security Policy (CSP) headers blocking legitimate authentication scripts. The issue affects versions 14.1.47.46 and 13.1.59.19, particularly impacting DUO, custom...
Cybersecurity experts report a dramatic surge in malicious scanning activity targeting Progress MOVEit Transfer systems, with daily scanning attempts jumping from fewer than 10 IP addresses to over 300 since late May 2025. Researchers have identified 682 unique IP addresses involved in thi...
Global food retailer Ahold Delhaize disclosed a November 2024 ransomware attack that compromised personal data of over 2.2 million individuals, primarily affecting U.S. operations including pharmacies and e-commerce platforms. The breach, linked to INC Ransom group, exposed sensitive infor...
