Meta has disclosed a critical security vulnerability in WhatsApp for Windows—tracked as CVE-2025-30401—which could allow remote attackers to execute arbitrary code on victim systems. The flaw affects all versions priorRead More →
Oracle has privately acknowledged to select customers that it suffered a security breach impacting its legacy Oracle Cloud infrastructure (Gen 1, aka Oracle Cloud Classic). While Oracle publicly maintains thatRead More →
A newly discovered set of undocumented commands in the widely used ESP32 microcontroller has raised significant cybersecurity concerns, with potential risks spanning consumer electronics, industrial control systems, and critical infrastructure.Read More →
Cloud security remains an evolving challenge as new attack vectors emerge, often leveraging misconfigurations rather than outright software vulnerabilities. In August 2024, researchers at Datadog Security Labs uncovered a novelRead More →
The National Security Agency (NSA) has officially released Ghidra 11.3, the latest iteration of its open-source Software Reverse Engineering (SRE) suite. This update delivers significant enhancements, including improved debugging infrastructure,Read More →
ESET researchers recently disclosed CVE-2024-7344, a critical vulnerability that compromises UEFI Secure Boot, a cornerstone of firmware-level security for modern systems. This flaw affects a wide range of UEFI-based systemsRead More →
Researchers have discovered a new attack named SysBumps, which targets macOS systems running on Apple Silicon processors. This attack leverages speculative execution vulnerabilities in system calls to bypass critical securityRead More →
In a concerning development within cybersecurity, attackers have been leveraging DocuSign’s API capabilities to send out fraudulent invoices that closely mimic genuine documents. These campaigns have been rising in frequency,Read More →
Microsoft experienced a significant disruption across several Azure cloud services on July 30, 2024, due to a distributed denial-of-service (DDoS) attack. The attack, which targeted Azure and Microsoft 365 services,Read More →