Top stories
Attackers Exploit Sangoma Switchvox Bug to Plant Reverse Shells
An unauthenticated SQL injection flaw in the popular VoIP platform is being actively weaponized to gain remote code execution.
Popular WordPress Backup Plugin Flaw Puts Millions of Sites at Risk
An unauthenticated SQL injection bug in All-in-One WP Migration and Backup could let attackers hijack sites and run malicious code.
Massive Breach Reportedly Exposes 150 Million Driver's License Photos
A criminal marketplace claimed to be selling scans stolen from an ID verification service before abruptly going dark.
Firefox's AI Toggle Turns Off Features, Not Data Collection
A closer look at Firefox 155 finds that disabling built-in AI options doesn't stop related telemetry from being sent to Mozilla.
SonicWall Warns Attackers Are Chaining Two SMA1000 Zero-Days
Threat actors are combining a pair of unpatched flaws in SonicWall's SMA1000 secure access appliances to gain remote code execution.
Global Law Enforcement Dismantles Long-Running Sality Botnet
A coordinated international operation seized servers and infrastructure behind the veteran peer-to-peer malware network.
Microsoft to Auto-Enable Windows 11 Security Feature That Can Slow Down Games
Memory integrity and Virtualization-based Security are getting turned on by default via quality updates starting next month.
US Charges Russian National in Phishing Scheme That Hit 80,000 Freelancers
A federal grand jury indictment alleges the suspect used fake job offers to plant remote-access malware on freelancers' computers worldwide.