CVE-2025-13375: Critical IBM CCA Flaw Exposes HSM Environments to Unauthenticated Remote Command Execution
CVE-2025-13375 CVE ID: CVE-2025-13375Product: IBM Common Cryptographic Architecture (CCA)Affected Versions: CVSS v3.1 Score: 9.8Severity: CriticalVulnerability Class: Remote…
continue reading..
CVE-2026-24884: High-Severity npm compressing Flaw Allows Silent File Overwrite via Malicious Archives
CVE-2026-24884 CVE ID: CVE-2026-24884Affected Component: compressing npm package (tar extraction functionality)Affected Versions: Fixed Versions: CVSS v3.1 Score:…
continue reading..
CVE-2026-25546: Critical Command Injection Flaw in Godot MCP Enables Remote Code Execution on Developer Systems
Vulnerability Overview CVE ID: CVE-2026-25546Affected Component: Godot MCP (Model Context Protocol server for Godot)Affected Versions: All versions…
continue reading..
Researchers Uncovers “Marco Stealer”: A Stealthy New Info-Stealing Malware Using Advanced Evasion and Encrypted Exfiltration Techniques
In mid-2025, cybersecurity researchers identified a new information-stealing malware dubbed Marco Stealer, reflecting a continued evolution in…
continue reading..
Emerging Threat Actor TeamPCP Exploits Cloud Misconfigurations to Power a New Wave of Cloud-Native Ransomware Attacks
In late 2025, a previously unknown threat actor calling itself TeamPCP — also associated with names like…
continue reading..
Researchers Detail DKnife: A Seven-Component AitM Toolkit Operating on Compromised Routers
The research team at Cisco Talos Intelligence published a comprehensive threat spotlight on a previously under-documented adversary…
continue reading..
Wave of Cyberattacks Targets U.S. Public Sector, Exposing Critical Vulnerabilities
Across the United States, critical parts of the public sector — from state and local governments to…
continue reading..
Zendesk Spam Wave Returns, Flooding Inboxes With Fake “Activate Account” Emails
A fresh spam outbreak is sweeping across the internet as users around the world report being inundated…
continue reading..
Betterment Confirms Data Breach Exposing Personal Information of 1.4 Million Customers
Fintech investment platform Betterment, one of the leading automated investment and financial advisory services in the United…
continue reading..
