A serious flaw has been discovered in the web application firewall product FortiWeb by Fortinet. Attackers are exploiting it to create new administrator accounts on devices without any login credentials. This means someone could gain full control of the device simply by sending a specially crafted request. The issue was found on devices that have … Continued
Operation Endgame was a global action carried out by international law-enforcement agencies. The mission was aimed at disrupting three major cyber-crime operations: Rhadamanthys, VenomRAT and Elysium. These tools were responsible for large-scale data theft and remote attacks. The operation became one of the biggest coordinated cyber crackdowns. Authorities successfully took down 1,025 servers used to … Continued
CISA has issued an alert about a critical security flaw in WatchGuard Firebox devices after confirming that attackers are already exploiting it in the real world. The vulnerability has been added to the Known Exploited Vulnerabilities list, which highlights threats that need urgent attention. Thousands of Firebox appliances across different countries are affected by this … Continued
Google has introduced a new system called Private AI Compute, a breakthrough in how artificial intelligence processes personal data. The aim is to combine the power of cloud computing with the privacy protection users expect from on-device processing. This means users can enjoy smarter, faster AI features without worrying about their private data being exposed. … Continued
A new Android malware called Fantasy Hub has been discovered by cybersecurity researchers. This malware is being sold as a full Malware-as-a-Service (MaaS) package on underground forums. It is designed to give hackers remote access to infected Android phones. The service is mainly promoted through Russian-speaking cybercrime channels. Fantasy Hub works like a remote access … Continued
A dangerous new malware called GlassWorm has made a return, targeting developers through Visual Studio Code (VS Code) extensions. This self-spreading worm is capable of infecting legitimate extensions, stealing developer credentials, and even taking remote control of systems. The campaign was first detected in October 2025 and, despite cleanup efforts, researchers have confirmed that new … Continued
A large-scale phishing campaign is targeting hotel systems across the world. Attackers are using a clever social engineering trick called “ClickFix” to fool hotel staff. This method convinces them to run harmful commands that secretly install malware. Security researchers have confirmed that this campaign is active and widespread. The attackers begin by sending fake emails … Continued
Google has introduced a dedicated reporting tool for businesses to report review extortion on their profiles. Previously, businesses had to use the general tool for reporting inappropriate reviews, but the new tool specifically helps address situations where customers threaten to leave negative reviews unless they are paid or receive some form of compensation. What’s happening? … Continued
Cybersecurity researchers have discovered multiple vulnerabilities in ChatGPT that could allow hackers to steal private user data. These flaws were found in features that connect ChatGPT to other apps and services. Experts say the weaknesses expose how integrated AI systems can unintentionally leak sensitive information. The findings have raised serious concerns among privacy and security … Continued
In September 2025, cybersecurity company SonicWall discovered a serious breach involving its cloud backup service, MySonicWall. The company found that hackers had gained unauthorized access to backup files containing customers’ firewall configurations and settings. These files were stored in SonicWall’s cloud servers and were meant to help users easily restore their network setups if needed. … Continued
