A China-linked hacking group, known as Warlock and tracked as Longlegs and Storm-2603, has expanded its exploitation of vulnerabilities in Microsoft SharePoint servers, targeting critical infrastructure, government, and education organisations worldwide.
International law enforcement, including German police and Europol, has announced the disruption of the KillSec ransomware group. The operation led to multiple arrests, including a 16-year-old suspected ringleader, and the seizure of critical infrastructure, preventing
The EU Cyber Resilience Act (CRA) is forcing technology vendors to overhaul their vulnerability management and product security. New 24-hour mandatory reporting for exploited flaws means manual triage is no longer viable, demanding automation and
Google has announced a significant security enhancement in Android 17, limiting access to its powerful AccessibilityService API to only verified accessibility tools for users with Advanced Protection enabled. This move aims to curb widespread abuse
A critical path traversal vulnerability in Fortinet FortiMail, tracked as CVE-2026-104286, is under active exploitation. The zero-day could allow attackers to write arbitrary files and potentially achieve remote code execution. CISA and Fortinet have issued
