Attackers are actively exploiting a critical CVSS 10.0 flaw in Arista's on-premises VeloCloud Orchestrator, potentially compromising SD-WAN edge devices.
A joint international advisory has identified a massive cyberattack campaign by the North Korean WaterPlum group, which compromised 30,000 devices to steal $10.7m.
Autonomous AI agents pose a new security challenge by discovering complex, unintended access paths through identity chaining and persistent exploration.
Security experts are analysing real-world Google Workspace breaches, highlighting how attackers use social engineering and malicious OAuth applications to bypass traditional security.
Researcher Abdelhamid Naceri, known as Nightmare Eclipse, has released 'BigDiskBuster', a new proof-of-concept exploit designed to disrupt Microsoft Defender updates.
