Friday, November 21, 2025
Follow on LinkedIn
Windows Remote Desktop Services Vulnerability

Windows Remote Desktop Services Vulnerability Let Attackers Escalate Privileges

Microsoft has disclosed a significant vulnerability in Windows Remote Desktop Services (RDS) that could allow authorized attackers to escalate their privileges on affected systems. Tracked...
Ivanti Endpoint Manager Vulnerabilities

Ivanti Endpoint Manager Vulnerabilities Let Attackers Write Arbitrary Files to Disk

Ivanti has rolled out security updates for its Endpoint Manager product, addressing three high-severity vulnerabilities that could let authenticated local attackers write arbitrary files...
Zoom Security Vulnerabilities

Zoom Vulnerabilities Let Attackers Bypass Access Controls to Access Session Data

Zoom has issued multiple security bulletins detailing patches for several vulnerabilities affecting its Workplace applications. The disclosures, published today, highlight two high-severity issues alongside medium-rated...
OWASP Top 10 2025

OWASP Top 10 2025 – Revised Version Released With Two New Categories

The Open Web Application Security Project (OWASP) has unveiled the 2025 edition of its flagship OWASP Top 10 2025, marking the eighth installment and...
Black Friday Scams

10 Popular Black Friday Scams – How to Detect the Red Flags and Protect...

Black Friday 2025 represents the most dangerous shopping season in cybercrime history, with fraudsters leveraging artificial intelligence, deepfake technology, and sophisticated social engineering tactics...
Whisper Leak Toolkit

New Whisper Leak Toolkit Exposes User Prompts to Popular AI Agents within Encrypted Traffic

A sophisticated side-channel attack that exposes the topics of conversations with AI chatbots, even when traffic is protected by end-to-end encryption. Dubbed "Whisper Leak," this...
Google Maps Feature Ransom Demands

Google Maps Adds Feature for Businesses to Report Ransom Demands Over Reviews

Scammers are targeting businesses with a new extortion scheme, and Google Maps is fighting back with a dedicated reporting tool. Google has introduced a feature...
Microsoft Teams’ “Chat with Anyone” Feature

Microsoft Teams’ New “Chat with Anyone” Feature Exposes Users to Phishing and Malware Attacks

Microsoft's upcoming Teams update, set for targeted releases in early November 2025 and worldwide by January 2026, will allow users to initiate chats with...
AI Tools Promoted by Threat Actors

List of AI Tools Promoted by Threat Actors in Underground Forums and Their Capabilities

The cybercrime landscape has undergone a dramatic transformation in 2025, with artificial intelligence emerging as a cornerstone technology for malicious actors operating in underground...
Cisco ASA and FTD 0-day RCE Vulnerability

Cisco Warns of Hackers Actively Exploiting ASA and FTD 0-day RCE Vulnerability in the...

Cisco has confirmed that threat actors are actively exploiting a critical remote code execution (RCE) flaw in its Secure Firewall Adaptive Security Appliance (ASA)...
CSN

Top 10