Wikipedia briefly restricted editing on March 5 after dormant malicious JavaScript ran during an internal security review and triggered a fast-moving vandalism incident. Wikimedia says…
Google says 90 zero-day vulnerabilities were exploited in real-world attacks during 2025, and nearly half of them hit enterprise software and appliances. That matters because…
The browser now handles far more than web pages, and that shift is creating a growing security gap for enterprises. According to Keep Aware’s newly…
Customers of restaurants that use HungerRush started receiving extortion emails this week after attackers gained access to one of the company’s email-related systems. HungerRush later…
AkzoNobel has confirmed a cybersecurity incident at one of its U.S. sites after the Anubis ransomware operation posted a leak claim online. In a statement…
Threat actors are abusing a legitimate part of OAuth to turn trusted Microsoft login links into phishing and malware delivery paths. In a new report,…
Indirect prompt injection is now a real-world security problem, not just a lab concept. Palo Alto Networks Unit 42 says attackers have already deployed web-based…
OpenAI has released GPT-5.4, a new frontier model the company positions for professional work across reasoning, coding, and long-horizon agent workflows. OpenAI says GPT-5.4 rolls…
A public proof-of-concept exploit now circulates for CVE-2026-20127, a critical authentication bypass in Cisco Catalyst SD-WAN Controller and SD-WAN Manager. Cisco Talos says attackers have…
Threat actors have started abusing fake “Claude Code” download pages to infect developers and IT professionals with an infostealer. The sites imitate legitimate Anthropic branding…
November 21, 2025
1 comment 
