Search
If you're running VMware ESXi, Workstation, or Fusion, it's time to pay attention—because attackers sure are. Broadcom just rolled out security updates to patch three actively exploited vulnerabilities, and it turns out over 40,000 VMware ESXi instances are at risk.
A major security vulnerability has been uncovered in the Veeam Updater component, a key part of various Veeam backup solutions. This flaw, identified as CVE-2025-23114, could allow hackers to execute malicious code on affected servers by launching a Man-in-the-Middle (MitM) attack. If successfully exploited, attackers could potentially gain root-level access, putting sensitive data and critical systems at risk.
Cybersecurity researchers have uncovered a serious vulnerability lurking in the Windows Common Log File System (CLFS). If exploited, this flaw could allow attackers to gain full SYSTEM-level control over your computer. Sounds scary, right? Well, it is. This zero-day vulnerability has been labeled CVE-2024-49138 and has even made it onto the Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) list—meaning it's actively being used by hackers.
The misuse of technology, including cyber threats and digital fraud, has the potential to create an entirely new form of corruption, warned Malaysian Anti-Corruption Commission (MACC) chief commissioner Tan Sri Azam Baki.
Cybercriminals have found a new way to break through two-factor authentication (2FA), a security feature once thought to be one of the most effective defenses against unauthorized access. Using a sophisticated phishing kit called Astaroth, hackers can now intercept login credentials and authentication codes in real time, putting accounts at serious risk.
