Chinese cyber groups are exploiting trusted cloud relationships to breach enterprise networks, with three major threat actors leading sophisticated espionage campaigns. Murky Panda targets government and technology sectors using zero-day exploits and cloud trust abuse, Genesis Panda manipu...
VMware has patched four critical zero-day vulnerabilities in ESXi, Workstation, Fusion, and Tools products that were exploited at Pwn2Own Berlin 2025. Three vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238) carry 9.3 severity ratings and enable virtual machine escape attacks...
The first quarter of 2025 saw 159 vulnerabilities exploited in the wild, with 28.3% weaponized within 24 hours of disclosure. Content Management Systems were the most targeted technology, followed by network edge devices and operating systems. Microsoft Windows led as the most exploited pr...
This weekly cybersecurity roundup highlights critical vulnerabilities, including an actively exploited Chrome zero-day and severe Kubernetes flaws. It covers emerging threats like BlackLock ransomware, solar inverter vulnerabilities, and RedCurl's pivot to ransomware. The report details so...
Microsoft's February 2025 Patch Tuesday addresses 55 security vulnerabilities, including four zero-day flaws (two actively exploited and two publicly disclosed). The update fixes various issues across multiple categories, including 22 Remote Code Execution and 19 Elevation of Privilege vul...
