CISA Confirms WatchGuard Firebox RCE Is Being Used in Ransomware Attacks
CISA confirms critical WatchGuard Firebox RCE CVE-2025-14733 is exploited in ransomware attacks. Learn affected versions, risks, and patch guidance.
CyberWorldOps
Latest news
More news
Page 44 / 92 · 828 articles
Fortinet CVE-2025-25249 Exploited at Scale to Install PivotC2 RAT
Attackers exploit Fortinet CVE-2025-25249 RCE flaw at scale, scanning 30,000+ IPs to install PivotC2 RAT on 178 devices for tunneling and data theft.
Infostealer Logs Reveal Thousands of Replayable AI Tokens That Can Bypass MFA
7GB infostealer dump exposed 44,791 JWTs and valid AI API keys from 5,871 hosts, enabling session replay and MFA bypass for OpenAI, Gemini and others.
US Agencies Accuse Six Chinese AI Firms of Industrial-Scale Model Distillation
CISA, NSA and FBI accuse six Chinese AI firms of extracting billions of tokens from US frontier models to train DeepSeek, Qwen and others.
Cisco Secure FMC Authentication Bypass Exploited for Root Access
Cisco confirms exploited CVE-2026-20079, a CVSS 10.0 FMC auth bypass allowing root access. See affected versions, hot fixes and log checks.
BlueMoon Exploit Kit Gives Four Espionage Groups a Shared Chrome-to-Windows Attack Chain
Four espionage groups use BlueMoon exploit kit chaining Chrome V8 flaws and Windows ALPC bug to escape sandbox and deploy payloads.
Fortinet Fixes Critical Authentication Flaws in FortiMonitorOnSight and Chrome Extension
Fortinet patched 10 flaws, including critical JWT auth bypass in FortiMonitorOnSight and Chrome extension proxy bug. Update FortiPAM and extension now.
Microsoft Defender ShieldCrash PoC Claims to Bypass the ShieldBreak Fix
New ShieldCrash PoC allegedly bypasses Microsoft's ShieldBreak fix (CVE-2026-69414), enabling SYSTEM file read via Defender engine.
Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now
Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.