[MEDIUM] – InjectEave Research Demonstrates RF-Induced Device Eavesdropping
Researchers demonstrated RF-induced side channels recovering audio and appliance states on 11 commercial devices.
[CRITICAL] – CISA Adds ConnectWise ScreenConnect Flaw to KEV
CISA added a ConnectWise ScreenConnect authorization flaw enabling file transfer and execution in active sessions to its KEV catalog.
[CRITICAL] – WordPress Super Forms Flaw Under Active Exploitation
Attackers are exploiting an unauthenticated arbitrary-file-upload flaw in the WordPress Super Forms plugin.
[MEDIUM] – Conti Ransomware Conspirator Sentenced to Four Years in U.S.
The U.S. Justice Department says a Conti ransomware conspirator received a four-year prison sentence.
[HIGH] – Mantax Otax Android Malware Combines Ransomware and Spyware
Mantax Otax targets Android users with ransomware, data theft, credential harvesting, and device-control capabilities.
[HIGH] – BlueMoon Exploit Kit Chains Chrome and Windows Flaws in Espionage Campaigns
Proofpoint identified four espionage-focused groups using BlueMoon to chain Chrome and Windows vulnerabilities.
[CRITICAL] – JFrog Artifactory Flaws Actively Exploited to Gain Administrative Control
Wiz reports active exploitation of three Artifactory vulnerabilities, including chains that yield administrative control.
[HIGH] – Fortinet CVE-2025-25249 Exploited to Deploy PivotC2
Attackers are exploiting Fortinet CVE-2025-25249 to deploy PivotC2; update affected FortiOS and FortiSwitchManager releases.
[CRITICAL] – NetScaler Authentication Bypass Added to CISA KEV
CISA added an actively exploited NetScaler authentication bypass to KEV; exposed gateway and AAA deployments need urgent updates.
[CRITICAL] – Cisco Talos Tracks Active Secure FMC Exploitation
Cisco reports active exploitation of two Secure FMC flaws, including a CVSS 10 authentication bypass enabling root access.