In a recent wave of cyberattacks, threat actors are exploiting the trust users place in widely-used collaboration tools by distributing weaponized versions of Microsoft Teams. […]
Month: September 2025
Critical VMware vCenter and NSX Vulnerabilities Expose Systems to Potential Attacks
On September 29, 2025, VMware disclosed multiple critical security vulnerabilities affecting its vCenter Server and NSX platforms. These vulnerabilities, identified as CVE-2025-41250, CVE-2025-41251, and CVE-2025-41252, […]
Apple Addresses Critical Font Parser Vulnerability Across Multiple Platforms
Apple has recently released security updates to address a significant vulnerability in its Font Parser component, identified as CVE-2025-43400. This flaw could allow malicious fonts […]
Critical Vulnerability in Western Digital My Cloud NAS Devices Allows Remote Code Execution
Western Digital has recently addressed a critical security vulnerability affecting multiple models of its My Cloud network-attached storage (NAS) devices. This flaw, identified as CVE-2025-30247, […]
Critical Vulnerabilities in VMware Tools and Aria Operations Enable Privilege Escalation to Root
On September 29, 2025, VMware disclosed three significant vulnerabilities affecting its Aria Operations, VMware Tools, VMware Cloud Foundation, VMware Telco Cloud Platform, and VMware Telco […]
Malicious ‘postmark-mcp’ Package Exfiltrates Emails via Hidden BCC
A recently discovered malicious npm package, ‘postmark-mcp,’ has been covertly exfiltrating user emails to an external server. This package, masquerading as the legitimate Postmark MCP […]
Critical Zero-Day Vulnerability in VMware Tools and Aria Operations Exploited for Privilege Escalation
A critical zero-day vulnerability, identified as CVE-2025-41244, has been discovered in VMware Tools and VMware Aria Operations, posing significant security risks to virtualized environments. This […]
Asahi Group’s Production Halted by Cyberattack: A Wake-Up Call for the Beverage Industry
On September 29, 2025, Asahi Group Holdings, a leading Japanese beverage conglomerate, experienced a significant cyberattack that led to a complete halt in production across […]
Lunar Spider: A Stealthy Threat to Windows Systems
In mid-September 2025, cybersecurity researchers identified a new malware strain named Lunar Spider, which poses a significant threat to Windows environments by compromising systems with […]
Escalating Exploitation of PAN-OS GlobalProtect Vulnerability CVE-2024-3400
In recent weeks, cybersecurity researchers have observed a significant uptick in malicious scanning activities targeting a critical vulnerability in Palo Alto Networks’ PAN-OS GlobalProtect feature, […]