The CL0P ransomware group has intensified its attacks against critical infrastructure sectors, leading to widespread data breaches and system encryptions in telecommunications and healthcare organizations worldwide. By exploiting a newly discovered zero-day vulnerability (CVE-2024-50623) in Cleo integration software, the attackers…

Apache Ignite is a distributed in-memory database platform that enables rapid processing and storage of large volumes of data. However, a critical vulnerability, identified as CVE-2024-52577, was recently discovered in the platform. This vulnerability could allow attackers to execute remote code (RCE).…

The RedTeamPentesting company has introduced a new tool called keycred for managing and auditing KeyCredentialLink in Active Directory (AD) environments. This tool plays a crucial role in security testing of AD systems and identifying vulnerabilities. With keycred, system administrators and…

Cybersecurity specialists have recently discovered an open-source repository on the GitHub platform called “Windows-WiFi-Password-Stealer.” This repository contains a Python script that allows users to extract saved Wi-Fi passwords from the Windows operating system. Although the author claims that this tool…

In the field of cybersecurity, protecting corporate data is of utmost importance. However, even platforms developed by major technology companies can contain vulnerabilities. Critical security flaws discovered in the IBM OpenPages Governance, Risk, and Compliance (GRC) platform have shown that…

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly issued a warning about large-scale attacks carried out by the Ghost ransomware group. This group has targeted organizations across more than 70 countries, spanning…

Mozilla has released Firefox 135.0.1 to protect users from potential Remote Code Execution (RCE) attacks. This update addresses a critical security vulnerability (CVE-2025-1414) that could have compromised systems and exposed user data. This vulnerability is classified as CWE-119 (Memory Corruption)…

A critical security flaw in the Jupiter X Core plugin for WordPress has been identified, potentially exposing over 90,000 websites to Local File Inclusion (LFI) and Remote Code Execution (RCE) attacks. This vulnerability, tracked as CVE-2025-0366, has been assigned a…

🔴 Cybercriminals Are Targeting the Education Sector! As cybersecurity challenges continue to grow in complexity, a new threat has emerged—Lumma InfoStealer, a malicious software (malware) designed to target educational institutions. This malware spreads through infected PDF documents, disguised as legitimate…

Cybersecurity researchers have identified two serious vulnerabilities in OpenSSH, a widely used protocol for secure network communication. These vulnerabilities, discovered by specialists at Qualys Threat Research Unit (TRU), have been registered as CVE-2025-26465 and CVE-2025-26466. These flaws allow attackers to…