A China-related attacker has exploited the vendor flaw since mid-2024, allowing it to move laterally, maintain persistent access, and deploy malware.

Full scale of infections remains 'unknown' China-linked attackers exploited a maximum-severity hardcoded-credential bug in ...

In my previous post, I walked through how disconnected MCP servers and AI agents create a growing blind spot in enterprise ...

ClickFix campaigns have adapted to the latest defenses with a new technique to trick users into infecting their own machines with malware.

The campaign exploits an Office vulnerability to deliver the modular XWorm RAT, chaining HTA, PowerShell, and in-memory .NET execution to sidestep detection and expand post-compromise control.

Learn how CVE-2026-1281 and CVE-2026-1340 enable pre-auth RCE in Ivanti EPMM, now actively exploited, and how AppTrana helps block attacks across applications. The post CVE-2026-1281 & CVE-2026-1340: ...

In the olden days, an administrator password on a BIOS was a mere annoyance, one quickly remedied by powering off the system and pulling its CMOS battery or moving a jumper around. These days, ...

A command injection flaw in the Windows Notepad App now gives remote attackers a path to execute code over a network, turning ...

The top video conferencing services we've tested help you stay connected and communicate with clients, team members, and anyone else, no matter where you are. I’ve been writing about consumer ...