Chinese threat actors have expanded their use of a chained Chrome and Windows zero-day exploit kit, using convincing fake websites to target victims with malware. Volexity linked the latest activity ...
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Palo Alto Networks has released security ...
Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could ...
Hackers are using convincing copies of trusted websites to turn an ordinary browser visit into a full Windows compromise. The campaign pairs targeted phishing emails with a chained set of previously ...
Vulnerabilities in Salesforce Agentforce, collectively dubbed "Salesbleed" by researchers, could expose customers' internal data and, worse, allow attackers to phish employees from within trusted ...
Administrators of Citrix Netscaler instances should update their devices immediately. According to several sources, two new exploits (zero-days) are circulating, allowing code injection on vulnerable ...