KERNELWATCHER

Enterprise Under Fire: Metasploit’s Latest Arsenal Exposes Gaping Holes in Corporate Defenses

A new Metasploit Framework update unleashes powerful exploit modules targeting major enterprise platforms, raising urgent questions about patching and security hygiene.

Zero-Day Roulette: Metasploit’s New Arsenal Puts FreePBX, Cacti, and SmarterMail in the Crosshairs

Unpatched and Exposed: Ivanti EPMM Flaws Open the Door for Remote Attackers

Two critical vulnerabilities in Ivanti Endpoint Manager Mobile are being actively exploited, putting organizations at severe risk of remote code execution.

Critical NVIDIA GPU Driver Flaws Give Hackers a Shortcut to System Control

Magento Under Siege: Sophisticated Hackers Breach Hundreds of E-Commerce Sites via “SessionReaper” Flaw

A critical authentication bypass in Magento Commerce has enabled global attackers to seize control of over 200 online stores, exposing businesses and customers to severe risks.

Unlocked from Afar: How Ivanti’s Endpoint Manager Flaw Opened the Door to Invisible Hackers

Two critical bugs in Ivanti Endpoint Manager Mobile let attackers take control without credentials-no clicks or passwords required.

AI’s Dark Side: How Hackers Weaponized Hugging Face to Hijack Android Devices

Inside the Fortinet Meltdown: Millions of Security Devices Laid Bare by SSO Flaw

A critical authentication bypass has left more than 3.28 million Fortinet systems exposed to global cyberattackers, threatening the backbone of enterprise and government networks.

Rushed Sabotage: Russian Hackers Leave Polish Power Grid Devices Disabled, Not Dark

A swift, opportunistic cyberattack bricked critical control devices in Poland’s power infrastructure, exposing new risks to distributed energy systems-without flipping the lights off.

Ivanti Under Siege: Zero-Day Vulnerabilities Unmask Alarming Security Gaps

Mail Mayhem: SmarterMail Users Exposed as Critical RCE Bug Goes Wild

A critical vulnerability in SmarterMail left thousands at risk of remote code execution-until a recent emergency patch.

Zero-Day Siege: Ivanti EPMM Flaws Hand Hackers the Keys-Are Enterprises Listening?

A pair of critical vulnerabilities in Ivanti Endpoint Manager Mobile have already been weaponized, forcing urgent security updates amid rising fears of stealthy intrusions.

“The Night Before Christmas” DDoS: Aisuru Botnet Unleashes Record-Shattering 31.4 Tbps Attack

Aisuru botnet’s holiday blitz exposes the escalating scale and sophistication of global DDoS threats.

Fortinet in the Crosshairs: Hackers Exploit Fresh SSO Flaw, Thousands at Risk

A critical FortiCloud vulnerability is being weaponized, prompting urgent warnings and a scramble to secure thousands of exposed systems.

PyTorch’s Hidden Trap: How a Single Model File Could Take Down Your AI Stack

A critical flaw in PyTorch’s checkpoint loading exposes machine learning systems to remote code execution and full system compromise.

Ghosts in the Registry: How ‘Swarmer’ Outsmarts Windows Security with Forgotten Features

A new attacker toolkit weaponizes obscure Windows profile mechanics to slip past even hardened endpoint defenses.

SolarWinds’ Web Help Desk: The Six-Alarm Security Fire You Can’t Ignore

Spreadsheet Sabotage: How a Cracked Sandbox Nearly Exposed Grist-Core Users to Remote Takeover

A stealthy vulnerability in Grist-Core’s sandbox allowed attackers to hijack systems via spreadsheet formulas-until a critical patch arrived.

Cyber Power Play: How Mitsubishi Electric’s Acquisition of Nozomi Networks Could Reshape Industrial Security

With Nozomi Networks now a Mitsubishi Electric subsidiary, the OT and CPS cybersecurity landscape faces a seismic shift-what’s at stake for critical infrastructure worldwide?

Proxy Empire Falls: Inside Google’s Global Crackdown on the IPIDEA Cybercrime Network

Google’s takedown of the IPIDEA proxy network exposes a hidden ecosystem of hijacked devices and cybercriminal activity on an unprecedented scale.