CVE-2025-59718 exposes critical flaws in Fortinet products, bypassing FortiCloud SSO. Affecting FortiOS, FortiWeb, and others, mitigation involves disabling SSO or upgrading to the latest patch. Recent vulnerabilities underscore urgency for immediate action to protect organizational security and data integrity…

The Linux kernel’s AMD GPU driver has a vulnerability, CVE-2021-4460, affecting versions up to 5.12.2. It emerges from undefined behavior when queue functions return zero. Patch updates are available to mitigate the issue, detectable using Nessus Plugin ID 269646…

Siemens Automation License Manager V6.0 faces CVE-2025-30033, a critical DLL hijacking vulnerability. Rated 8.5 on CVSS, it won’t be patched. With over 100 affected products like SIMATIC PCS 7, mitigation is essential. Discover how this vulnerability operates and crucial steps for protecting your OT environment…

A massive cyberattack on Instructure’s Canvas platform has exposed personal data of students and staff in Queensland schools. Over 200 million users globally are impacted. While sensitive data like passwords remains safe, names and emails were accessed, raising security concerns and potential risks…

Kraken’s recent security incident wasn’t due to an external hack but an insider breach involving recruited support employees. Approximately 2,000 accounts faced exposure, though no funds were stolen. This mirrors a similar attack on Coinbase, highlighting insider threats as a growing concern in the crypto world…

The NoVoice malware infiltrated 2.3 million Android devices through 50 seemingly normal apps on Google Play. These apps bypassed security checks, posing serious risks to millions, especially those on older Android versions. Learn how to check if your device was compromised and steps to stay protected…

The Cloud Security Alliance warns CISOs of an ‘AI vulnerability storm’ unleashed by Anthropic’s Claude Mythos, capable of rapidly discovering and exploiting severe vulnerabilities. Current security programs risk obsolescence as AI accelerates attack timelines. Prepare now with expert guidance to stay ahead of AI-driven threats…

A hacker breached Crunchyroll, compromising 6.8 million accounts by exploiting an Okta SSO. Extracted data includes emails, names, IPs, and more. The attacker demanded $5 million without response, leaving users’ data at risk. Discover protective steps every Crunchyroll user must take immediately to safeguard their accounts…

CISA mandates federal agencies to patch critical flaws in Cisco SD-WAN devices by February 27, 2026, due to active exploits. The directive targets vulnerabilities in SD-WAN Manager and Controller systems, alerting private businesses globally about the threats and urging immediate action to prevent breaches…