-
UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds inside legitimate control-plane processes to maintain access, intercept decrypted communicat…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according to CrowdStrike’s latest assessment of threats affecting the legal sector. The activity is attribute…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The National Institute of Standards and Technology (NIST) has released finalized guidance to assist organizations in replacing cryptography that is vulnerable to quantum computing before future quantum computers pose a threat to sensitive information. …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GitHub has launched Copilot Fusion, a runtime model router and orchestrator that automatically selects AI models and execution patterns for coding tasks. Instead of requiring developers to choose a model for each step, Fusion coordinates reasoning, cod…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An investigation into browser extensions identified 319 suspicious extensions linked to about 13.4 million reported users, exposing a search-hijacking ecosystem operating since 2016. Marketed as manual finders, PDF converters, safe search utilities, an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft will begin retiring Microsoft-provided SMS and voice authentication in Microsoft Entra ID on February 1, 2027, requiring affected organizations to migrate users or arrange alternative telecom delivery before enforcement starts. The change cov…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser’s sandbox and executes code on Windows. This exploit utilizes only logical vulnerabilities and does not involve an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Chinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to penetrate strategically significant organizations. Its investigation exposed Silent Train, a covert acces…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses. The dataset reportedly includes 38,628 order records from Ju…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog. This decision was made after evidence…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
