A critical zero-day vulnerability in Zyxel CPE devices enables unauthorized command execution, with over 1,500 devices exposed online. Simultaneously, a separate campaign targets SimpleHelp remote desktop software through multiple CVEs, attempting unauthorized access and domain information...
A high-severity vulnerability (CVE-2025-22217) has been discovered in VMware Avi Load Balancer, allowing unauthenticated SQL injection attacks. Affecting versions 30.1.1 through 30.2.2, the flaw enables attackers with network access to execute malicious SQL queries. Patches are available, ...
Russian-linked APT group UAC-0063 expands operations beyond Central Asia, targeting European embassies and governments with advanced malware suite including DownEx, LOGPIE, and CHERRYSPY. The group employs sophisticated tactics, using stolen diplomatic documents and multiple malware tools ...
Critical security vulnerabilities discovered in Cacti network monitoring tool allow authenticated users to execute arbitrary code through SNMP parser flaws and PHP script creation. With CVSS scores of 9.1 and 7.2, these flaws affect versions up to 1.2.28 and have been patched in version 1....
The healthcare sector faces escalating cybersecurity threats, with Interlock ransomware emerging as a major concern following the UnitedHealth breach affecting 190M Americans. This sophisticated group employs double-extortion tactics, targeting healthcare facilities through advanced phishi...
