Swiss building automation firm Sauter AG has identified six security vulnerabilities in the firmware of its modulo 6 devices, including a critical flaw rated 9.8 on the CVSS scale. The most severe vulnerability, tracked as CVE-2025-41723, allows unauthenticated attackers to upload files remotely via the system’s SOAP interface. The Sauter AG flaw letsnaturally threat actors […]
Google has issued an urgent Stable Channel update for Chrome on Windows, Mac, and Linux platforms, addressing a high-severity vulnerability in its V8 JavaScript engine. The flaw, tracked as CVE-2025-12036, could allow attackers to exploit memory-related weaknesses in the engine. The latest Google Chrome patch fixes this critical issue in version 141.0.7390.122/.123, and users are […]
OpenAI has intensified competition in the AI browser sector with the launch of ChatGPT Atlas, an AI-powered web browser designed to reshape how users interact online. OpenAI challenges Google’s dominance by integrating its advanced conversational AI directly into the browsing experience, signaling a strategic shift toward intelligent, adaptive web tools. The browser war is escalating […]
A recent cyber campaign used a spoofed Microsoft Teams installer to deploy the Oyster backdoor, leveraging poisoned search results and short-lived code-signing certificates. Hackers spoof Teams app pages to trick users into downloading what appears to be legitimate software but is in fact malware. The installer, signed by “KUTTANADAN CREATIONS INC.,” evaded detection due to […]
Security researchers at Noma Labs uncovered a critical vulnerability, dubbed ForcedLeak, in Salesforce Agentforce that allows attackers to exfiltrate sensitive CRM data through indirect prompt injection. The flaw, rated CVSS 9.4, specifically affects organizations using Agentforce with Web-to-Lead functionality enabled. Exploiting gaps in context validation and AI behavior, adversaries can embed malicious instructions in web […]
European regulators have launched a formal investigation into SAP’s aftermarket services for its on-premise enterprise resource planning (ERP) software. The EU probes SAP over whether its practices may restrict competition by limiting customer choices in ERP support services. The European Commission aims to determine if SAP’s conduct violates antitrust rules by tying customers to its […]
Dutch authorities have arrested two teenagers suspected of intercepting wireless network traffic on behalf of Russian operatives. The suspects, identified only as minors, allegedly engaged in Wi-Fi sniffing activities targeting sensitive communications. Investigators believe the Dutch teens caught in WiFinaturally participated in a broader espionage campaign linked to Russian intelligence interests. The case has raised […]
A lithium-ion battery explosion ignited a fire at the National Information Resources Service facility in Daejeon, triggering a major South Korea data fire that disabled more than 600 government websites. The blaze, which began Friday evening during battery relocation work, caused a thermal runaway that burned for nearly 10 hours and forced authorities to shut […]
A newly developed proof-of-concept known as the EDR-Freeze tool exploits Windows functionality by leveraging the Windows Error Reporting (WER) system to suspend security software directly from user mode. This technique raises concerns about the ability of threat actors to bypass endpoint detection and response (EDR) systems without requiring administrative privileges. The EDR-Freeze tool exploits Windows […]
Threat actors have increasingly exploited Oracle Scheduler to breach corporate networks by abusing its External Jobs feature. Recent incidents show attackers executing system-level commands through extjobo.exe, gaining unauthorized access even in segmented environments. Researchers observed adversaries initiating attacks by scanning for exposed Oracle listener ports and exploiting misconfigured or default credentials. Once inside, Oracle Scheduler […]
A malicious update disguised as a routine BlockBlasters Steam patch has exposed hundreds of users to a data-stealing malware campaign. The infected update, released on August 30, 2025, targeted players of the 2D platformer developed by Genesis Interactive, turning a trusted download into a vehicle for cyber intrusion. Security analysts at G Data discovered the […]
Cybercriminals have begun deploying AsyncRAT hides in malicious SVGs that mimic legitimate web portals, security researchers report. These Scalable Vector Graphics files are crafted to appear authentic while avoiding detection, as they do not require connections to external websites to function. The deceptive SVGs leverage embedded scripts to initiate the download and execution of the […]