CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert about a zero-day vulnerability in Google Chrome, actively exploited by threat...
pi GPT Tool Turns Your Raspberry Pi into A ChatGPT Powered AI-managed device
pi GPT, a custom integration for OpenAI's ChatGPT that transforms everyday Raspberry Pi devices into fully managed AI-powered workstations.
Announced on November 18, 2025, this...
China-Nexus APT Group Leverages DLL Sideloading Technique to Attack Government and Media Sectors
A targeted cyber espionage campaign has emerged across Southeast Asia, specifically affecting government and media organizations in countries surrounding the South China Sea.
The campaign,...
Hackers Can Exploit Default ServiceNow AI Assistants Configurations to Launch Prompt Injection Attacks
A dangerous vulnerability in ServiceNow's Now Assist AI platform allows attackers to execute second-order prompt injection attacks via default agent configuration settings.
The flaw enables...
Cline AI Coding Agent Vulnerabilities Enables Prompt Injection, Code Execution, and Data Leakage
Cline is an open-source AI coding agent with 3.8 million installs and over 52,000 GitHub stars. Contains four critical security vulnerabilities that enable attackers...
Hackers Attacking Palo Alto Networks’ GlobalProtect VPN Portals with 2.3 Million Attacks
Hackers have unleashed over 2.3 million malicious sessions against Palo Alto Networks' GlobalProtect VPN portals since November 14, 2025, according to threat intelligence firm...
How to Solve Alert Overload in Your SOC
Your SOC generates thousands of alerts daily. Many of them are low-priority, repetitive, or false positives. On paper, this looks like a technical problem. In reality, it’s a...
Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild
Hackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in the popular file archiver 7-Zip, putting millions of users at risk...
Sysmon – Go-to Tool for IT Admins, Security Pros, and Threat Hunters Coming to...
Microsoft is bringing native Sysmon functionality directly into Windows, eliminating the need for manual deployment and separate downloads.
Starting next year, Windows 11 and Windows Server 2025...
‘The Gentlemen’ Ransomware Group with Dual-Extortion Strategy Encrypts and Exfiltrates Data
A new ransomware threat named "The Gentlemen" has emerged in the cybersecurity landscape, demonstrating advanced attack capabilities and a well-structured operational model.
First appearing around...












.webp?w=100&resize=100,70&ssl=1)


