New Vulnerabilities Discovered in GoAhead Web Server Software Cybersecurity experts from Cisco Talos have identified two significant vulnerabilities within the GoAhead web server software, a lightweight application commonly integrated into hundreds of millions of Internet-connected smart devices. This discovery raises serious concerns for organizations relying on these technologies. The first…
A recently uncovered zero-day exploit, known as YellowKey, poses a significant risk to Windows 11 systems. This exploit enables individuals with physical access to bypass the standard BitLocker encryption, allowing them to access secured drives within mere seconds. BitLocker is crucial for protecting sensitive information on enterprise machines, as it…
Each year, countless smartphones fall victim to theft. Among them, a significant number are iPhones that are illegally shipped to various regions, particularly China, where they are dismantled for parts. However, there exists a lucrative market in which these stolen devices can be unlocked and reset, offering criminals a chance…
OpenBSD, a celebrated open-source operating system designed with a focus on security, has recently been identified as vulnerable to four critical security flaws. Among these, one particularly notable vulnerability is an authentication bypass issue within the BSD Auth framework. The remaining three vulnerabilities are related to privilege escalation, potentially enabling…
Organizations across Japan and the Asia-Pacific region are facing a surge of cyberattacks attributed to a group known as Twill Typhoon. These attacks, which began in late September 2025, have raised alerts among cybersecurity experts at Darktrace, who note that the attackers employ sophisticated tactics to masquerade as legitimate services,…
A research team specializing in cybersecurity has unveiled a new method for exploiting the Intel Software Guard Extensions (SGX), a crucial feature designed to secure sensitive data within modern Intel processors. Named Plundervolt and categorized as CVE-2019-11157, this attack leverages the ability to manipulate frequency and voltage settings of processors.…
Recently, critical vulnerabilities were identified in two prominent WordPress plugins: “Ultimate Addons for Beaver Builder” and “Ultimate Addons for Elementor.” These vulnerabilities pose significant risks for users who have not updated to the latest versions. Researchers have uncovered an authentication bypass vulnerability that allows attackers to gain administrative control of…
DHS to Test Autonomous Drones and Vehicles at US-Canada Border The U.S. Department of Homeland Security (DHS), in partnership with Defense Research and Development Canada (DRDC), plans to deploy autonomous drones and vehicles along the U.S.-Canada border this November. The initiative aims to evaluate which technologies can effectively stream surveillance…
WhatsApp, the leading end-to-end encrypted messaging platform, has successfully addressed a serious flaw that could have allowed a malicious actor to crash the app for all members of a targeted group chat, as disclosed by The Hacker News. This vulnerability had the potential to disrupt the messaging experience for users,…