Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…
Tag: network security
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has released security updates to address multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, UniFi Talk, UniFi Access,…
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
The CERT Coordination Center (CERT/CC) has issued a warning about an undocumented authentication backdoor in multiple versions of Tenda router firmware. The…
Progress Kemp LoadMaster CVE-2026-8037 Under Active Exploitation
A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 (CVSS 9.6), is now facing active exploitation attempts.…
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
Cisco Patches Actively Exploited SD-WAN Manager Vulnerability CVE-2026-20262
Cisco has released security updates to address a medium-severity vulnerability in its Catalyst SD-WAN Manager (formerly SD-WAN vManage) that is being actively…
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
Dawn of the Apex Agentic Adversary: AI-Driven Threats Compress Attack Timelines
The cybersecurity landscape is entering a new era where AI-powered agentic adversaries compress the time between vulnerability discovery and weaponization to near-instantaneous…
CISA Warns Critical Lantronix EDS5000 Flaw CVE-2025-67038 Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of a critical vulnerability in Lantronix EDS5000…