Collaborate Disseminate
SafeBreach researchers have released details on several vulnerabilities that could be exploited by attackers to crash Windows Active Directory domain controllers (DCs), one one of which (CVE-2025-32724) can also be leveraged to force public DCs to part… Continue reading Win-DDoS: Attackers can turn public domain controllers into DDoS agents
“In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could potentially escalate privileges within the organization’s connected cloud environment without leaving easily detectable a… Continue reading Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786)
Akira ransomware affiliates are not leveraging an unknown, zero-day vulnerability in SonicWall Gen 7 firewalls to breach corporate networks, the security vendor shared today. “Instead, there is a significant correlation with threat activity relat… Continue reading SonicWall: Attackers did not exploit zero-day vulnerability to compromise Gen 7 firewalls
Adobe has released an emergency security update for Adobe Experience Manager Forms on Java Enterprise Edition (JEE), which fix two critical vulnerabilities (CVE-2025-54253, CVE-2025-54254) with a publicly available proof-of-concept (PoC) exploit. Detai… Continue reading Adobe patches critical Adobe Experience Manager Forms vulnerabilities with public PoC
Unauthenticated command injection vulnerabilities (CVE-2025-54948, CVE-2025-54987) affecting the on-premise version of Trend Micro’s Apex One endpoint security platform are being probed by attackers, the company has warned on Wednesday. Unfortuna… Continue reading Trend Micro Apex One flaws exploted in the wild (CVE-2025-54948, CVE-2025-54987)
A set of firmware vulnerabilities affecting 100+ Dell laptop models widely used in government settings and by the cybersecurity industry could allow attackers to achieve persistent access even across Windows reinstalls, Cisco Talos researchers have dis… Continue reading Millions of Dell laptops could be persistently backdoored in ReVault attacks
Microsoft is working on a AI agent whose main goal is autonomous malware detection and the prototype – dubbed Project Ire – is showing great potential, the company has announced on Tuesday. Tested on a dataset of known malicious and benign … Continue reading Project Ire: Microsoft’s autonomous malware detection AI agent
Attackers wielding the Akira ransomware and possibly a zero-day exploit have been spotted targeting SonicWall firewalls since July 15, 2025. “In the intrusions reviewed, multiple pre-ransomware intrusions were observed within a short period of ti… Continue reading SonicWall firewalls targeted in ransomware attacks, possibly via zero-day
One of the groups that, in the past few weeks, has been exploiting vulnerabilities in on-prem SharePoint installation has been observed deploying Warlock ransomware, Microsoft shared on Wednesday. First attack spotted on July 7th On Saturday, Microsoft… Continue reading Storm-2603 spotted deploying ransomware on exploited SharePoint servers
Sonicwall is asking customers running specific Secure Mobile Access (SMA) 100 Series devices to patch a newly uncovered vulnerability (CVE-2025-40599) as soon as possible. “While there is currently no evidence that this vulnerability is being act… Continue reading Sonicwall fixes critical flaw in SMA appliances, urges customers to check for compromise (CVE-2025-40599)