Date: November 15, 2025 Summary: Security researchers have disclosed a newly identified class of side-channel attack against large language models (LLMs) deployed in multi-tenant cloud and...
The Definitive 2025 Guide to Autonomous, AI-Powered Extended Detection and Response In 2025, XDR is no...
In the ever-escalating cat-and-mouse game between red teamers and blue team defenders, new tools and techniques constantly emerge to test the limits of security solutions. One such tool that has...
A dangerous, multi-purpose botnet known as RondoDox has significantly escalated its operations by adding a critical, unauthenticated remote code execution vulnerability in the XWiki enterprise...
Princeton University has confirmed that one of its databases managed by the advancement office was compromised by external actors on November 10. The breach lasted less than 24 hours and exposed...
The rapid advancement of Artificial Intelligence (AI) has ushered in a new era of digital interaction and automation. From intelligent virtual assistants helping with daily tasks to sophisticated...
Date: November 14, 2025 Overview: The DanaBot banking trojan, long considered disrupted following a global law enforcement operation earlier this year, has reemerged in a new, upgraded form....
Date: November 13, 2025 Overview: Microsoft has released a sweeping security update addressing a total of 63 vulnerabilities across multiple Windows and enterprise products. The update—deemed a...
Unprecedented Remote Code Execution Flaws Expose Global AI Infrastructure to Full System Compromise Published: November 15, 2025 ...
Logitech International S.A., the Swiss-based consumer electronics giant, has disclosed a cybersecurity incident involving the unauthorized access and data exfiltration from its internal IT systems....
The Akira ransomware group has expanded its operations by targeting Nutanix AHV hypervisors, marking a significant escalation in attacks on virtualized infrastructure. The campaign focuses on...
A critical flaw in Fortinet’s FortiWeb Web Application Firewall, tracked as CVE-2025-64446, is now being actively exploited in the wild. The vulnerability enables unauthenticated attackers to bypass...
CVE-2025-9242 CVSS 9.3 Actively Exploited Added to CISA Known Exploited Vulnerabilities Catalog – November 13, 2025 This vulnerability is under active exploitation in...
Anthropic has disclosed that it disrupted a highly sophisticated cyber espionage operation in which a state sponsored threat group used its Claude Code tool to automate large parts of an intrusion...
Italian knitwear giant hit by ransomware — 500 GB of sensitive data at risk November 13, 2025 In a bold and calculated cyber assault,...
Date: November 13 2025 Overview: As ransomware-as-a-service (RaaS) platforms continue to proliferate, shifting the threatscape from isolated attacks to industrial-scale extortion operations, more...
Amazon’s threat intelligence team has identified an advanced persistent threat actor actively exploiting zero day vulnerabilities in Cisco Identity Services Engine and Citrix NetScaler systems. The...
Brazilian banking customers are facing a new generation of focused financial malware. Two closely related families, known as Maverick and Coyote, blend social engineering, fileless infection...
Sensitive Patient and Research Data Potentially Exposed November 12, 2025 A prominent oncology company has disclosed a significant data breach that may have...
Date: November 12, 2025 In a major legal escalation in the fight against global cyber-fraud, Google LLC has filed a civil lawsuit in the U.S. District Court for the Southern District of New York...