Barracuda Confirms Hackers Are Chaining Two Email Gateway Bugs for Full Root Access
Barracuda says a small number of customers have already been hit by attackers combining two vulnerabilities in its Email Security Gateway to gain root-level access without authentication. The...
Microsoft Confirms Attackers Are Already Exploiting a Fresh Outlook Flaw to Steal Login Hashes
Microsoft has confirmed active exploitation of a newly patched Outlook vulnerability that can leak a victim's Windows authentication hash when they open a malicious file. The zero-day, fixed...
Fortinet Patches a Cluster of Critical Flaws — Several Let Attackers Skip the Login Screen Entirely
Fortinet has disclosed a batch of critical vulnerabilities across FortiManager, FortiAnalyzer, and FortiOS, several of which score above 9.0 on the CVSS scale and can be triggered without...
GhostFrame: The New ESXi Backdoor Letting Ransomware Crews Raid VMware Hosts From the Hypervisor Down
A newly discovered attack framework called GhostFrame gives intruders a single control panel to take over VMware ESXi hosts, hide from built-in protections, and pull Windows credentials straight...
A Jailbroken DeepSeek AI Agent Ran a Weeks-Long Breach of a European Telecom, Researchers Say
Researchers discovered an exposed server revealing how an operator used a jailbroken DeepSeek AI agent to autonomously breach a European telecom and 13 hosted companies, allegedly reaching millions...
GhostAction Returns: Hijacked Maintainer Accounts Push Secret-Stealing Workflow to 500+ GitHub Repositories
A new wave of the GhostAction campaign compromised over 500 GitHub accounts, planting a disguised 'security audit' workflow across tens of thousands of repositories to siphon off AWS,...
N-able Pulls N-central Offline Worldwide After Researcher Drops 33 Alleged Zero-Day Exploits
N-able shut down its hosted N-central environments globally and told on-premises customers to do the same, after a researcher published 33 claimed zero-day vulnerabilities and working exploit code...
Google Rushes Emergency Patch as Chrome Zero-Day Is Exploited in the Wild
Google has shipped an emergency Chrome update after confirming that attackers are already exploiting a high-severity use-after-free flaw in the browser's XML handling. The fix lands alongside eight...