Microsoft has resolved a persistent issue in Windows 11 that confused users for years. The glitch, which affected the “Update and Shut Down” option, caused systems to restart instead of powering off as intended. This long-overdue correction means users can now confidently shut down their devices without surprise reboots. Microsoft fixes decade-old behavior that originated […]
China-linked hackers have launched a global cyber campaign targeting Cisco firewall devices, according to recent reports. The China hackers breach Cisco equipment to exploit vulnerabilities in network infrastructure, potentially compromising sensitive enterprise data across various sectors. Security researchers have observed a rise in sophisticated attack patterns linked to state-sponsored groups. The attackers focused on gaining […]
Hackers hijack sites using an authentication bypass flaw in JobMonster, a popular WordPress theme used for job board websites. Security researchers detected active exploitation of this critical vulnerability, which makes it possible for attackers to take over administrator accounts under specific conditions. The flaw, tracked as CVE-2025-5397, is one of three major vulnerabilities disclosed in […]
Google’s November 2025 Android Security Bulletin highlights a critical zero-click remote code execution vulnerability identified as Android flaw CVE-2025-48593. This exploit affects the System component and targets Android versions 13 through 16. Because the flaw requires no user interaction to execute malicious code, it poses a significant threat to millions of devices across the ecosystem. […]
Google’s cybersecurity-focused AI tool, Big Sleep, recently uncovered five previously unknown vulnerabilities in Apple’s Safari WebKit. The flaws, which Apple has acknowledged, could allow attackers to trigger browser crashes or manipulate memory, posing risks to user security. This marks another instance where Google AI uncovers flaws in widely used software components, reinforcing the role of […]
Cybercriminals are using deceptive online ads to disguise malware as legitimate software like PuTTY and Microsoft Teams, in a campaign known as Putty Teams Ads Spread. The effort delivers OysterLoader, a stealthy tool that enables intrusions into corporate networks and serves as an entry point for the Rhysida ransomware group. Researchers at Expel uncovered this […]
A critical remote code execution flaw in XWiki’s SolrSearch component has triggered a wave of exploitation attempts, as hackers target the XWiki flaw through mass internet scanning. The vulnerability permits attackers with guest-level access to execute arbitrary commands, posing a serious threat to organizations running the open-source enterprise wiki platform. Though XWiki issued a patch […]
Google has issued a critical alert warning of a severe Android flaw that lets hackers execute remote code without user interaction. Detailed in the November 2025 Android Security Bulletin, the vulnerability—tracked as CVE-2025-48593—resides in the System component and affects Android Open Source Project versions 13 through 16. Attackers could exploit it via crafted network packets […]