Latest

Security analysts at Koi Security have uncovered a large-scale malicious campaign—dubbed "GreedyBear"—operating through the Mozilla Add-ons Store. The operation involved 150 malicious Firefox extensions that collectively stole more than $1 million in cryptocurrency from unsuspecting users. How the Scam Worked The extensions disguised themselves as legitimate

Firmware flaws in Dell ControlVault3 affect more than 100 Dell laptop models, enabling attackers to bypass Windows Login and install malware that can survive even after an operating system reinstall. What is Dell ControlVault? Dell ControlVault is a hardware-based security solution that stores passwords, biometric data, and security codes in

Adobe has released out-of-band security updates to address two critical vulnerabilities in Adobe Experience Manager (AEM) Forms (Java Enterprise Edition, JEE), both of which already have public proof-of-concept (PoC) exploits. The flaws—tracked as CVE-2025-54253 (CVSS score: 10.0, maximum severity) and CVE-2025-54254 (CVSS score: 8.6)—could allow attackers

WhatsApp has rolled out a new security feature designed to help users identify potential scammers when someone outside their contact list invites them to a group chat. The update introduces a "Safety Overview" warning that displays key details about the group—such as its creation date, total number

In an update to its June advisory, Google disclosed that it, too, fell victim to a similar attack. “In June, one of Google’s corporate Salesforce instances was compromised by UNC6040 activity,” the company stated. “The affected instance stored contact information and related notes about small and medium-sized businesses. Our

Several critical vulnerabilities have been patched in Cursor AI, a popular AI-powered code editor. The flaws allowed attackers to silently modify MCP (Model Context Protocol) configuration files and execute arbitrary code—without any user approval. 🔍 Key Findings CVE-2025-54136 ("MCPoison") — CVSS 7.2 Discovered by Check Point, this vulnerability

SonicWall has issued an urgent advisory to its customers, warning them to disable SSL VPN services on 7th-generation firewalls amid a wave of ransomware attacks potentially exploiting a zero-day vulnerability. Key Details According to Arctic Wolf researchers, multiple attacks involving Akira ransomware have been observed since July 15, 2025. These