Cybersecurity News - Page 11

The operation, codenamed ‘Operation Synergia III,’ ran from July 2025 to January 2026 and involved authorities from 72 countries.

Victims are redirected to spoofed websites that imitate legitimate VPN vendors including Ivanti, Cisco, and Fortinet.

In brief: Google fixes two Chrome zero-days, CISA updates its KEV list with four new entries, and more.

The directory contained what appears to be a complete exploitation framework designed to target vulnerabilities in Roundcube.

The attackers combined social engineering with advanced evasion techniques to infiltrate corporate systems and steal data.

The company patched two publicly disclosed flaws; neither has been observed to be actively exploited in attacks.

The malware’s operators mainly exploit home and small-office networking equipment.

Attackers are exploiting recently disclosed vulnerabilities or weak credentials to gain access to FortiGate devices.

The threat actor has been using the BeardShell and Covenant custom malware implants since April 2024.

Organizations are recommended to patch the vulnerabilities as soon as possible.