Fortinet blocks an exploited FortiCloud single sign-on (SSO) vulnerability as it works to develop and release a permanent fix. The company confirmed that threat actors have already taken advantage of the zero-day flaw, identified as CVE-2026-24858, which allows authentication bypass in FortiCloud SSO. In response, Fortinet has disabled SSO connections from devices running affected firmware, […]
WhatsApp enables a lockdown feature designed to defend high-risk users from sophisticated cyber threats, according to an announcement from Meta. The new “Strict Account Settings” option empowers users to apply the most restrictive privacy controls with just a few taps. Once activated, the feature blocks attachments and silences calls from unknown contacts, limiting potential attack […]
A China-linked cyberespionage group, dubbed Salt Typhoon, is accused of infiltrating mobile devices belonging to aides of UK prime ministers, according to reports. The attackers allegedly gained access to handsets used by senior government personnel, raising alarms over the potential compromise of sensitive communications. Salt Typhoon, suspected to operate under state direction, allegedly conducted the […]
Cybercriminals and advanced threat actors linked to nation-states are actively leveraging a WinRAR defect exploited for over six months to launch targeted attacks. The flaw has become a reliable entry point in espionage campaigns against military, government, and technology organizations, according to new threat intelligence reports. These malicious actors use the vulnerability to gain persistent […]
A newly uncovered phishing campaign has seen Microsoft Teams hijacked by cybercriminals using the platform’s native guest-invite feature to deploy malicious content under the guise of trusted Microsoft services. Attackers create fake teams with alarming financial references and invite victims via legitimate Teams email addresses, bypassing standard security checks like SPF, DKIM, and DMARC. One […]
Microsoft released a critical security update after attackers exploited a zero-day vulnerability in its Office suite. The flaw, tracked as CVE-2026-21509, allows adversaries to bypass essential security defenses, prompting Microsoft to act swiftly. With this update, Microsoft patches Office against an actively used exploit that poses a real-world risk to users. Security researchers identified the […]
The European Commission has opened a formal inquiry as the EU probes X over its deployment of the Grok artificial intelligence tool, which has been linked to the production of sexually explicit images. Regulators are examining whether the company adequately assessed potential risks before releasing the AI system to users. According to officials, the investigation […]
OpenAI is rolling out promotional content directly within its ChatGPT platform, and investors are watching closely. The move highlights how OpenAI’s ChatGPT ads cost nearly three times more than Meta’s, despite relying on far less user data. The decision raises questions about targeting precision and value, as ChatGPT gathers minimal personal information compared to social […]
Europol warns that criminal organizations are rapidly changing their methods to smuggle cocaine into Europe through maritime routes, according to a report released Thursday. The analysis, titled “Diversification in Maritime Cocaine Trafficking Modi Operandi,” outlines how organised crime networks adapt their tactics to bypass detection and exploit weaknesses in port security across Europe. The report […]
A newly discovered cybercrime tool known as the “Stanley” toolkit fakes Chrome browser URLs and is being sold for $6,000 on Russian-speaking hacking forums. Researchers say the toolkit disguises phishing domains by manipulating how URLs appear in Google Chrome, making it difficult for users to detect fraudulent sites. The “Stanley” toolkit operates by exploiting Chrome’s […]
A newly disclosed server-side instagram flaw gave attackers the ability to access private posts and captions without authentication, security researcher Jatin Banga revealed this week. The issue exploited Instagram’s mobile web infrastructure using manipulated HTTP headers and bypassed standard privacy safeguards. By crafting a GET request with mobile user-agent headers, attackers triggered a JSON response […]
A recent phishing campaign, active from November 2025 to January 2026, has seen Vercel hosting abused to distribute a remote access tool under the guise of legitimate online services. Threat actors behind the operation crafted emails with financial lures like overdue invoices and shipping documents, prompting users to click embedded links. These links led to […]