Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities

The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April.

The post Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities appeared first on SecurityWeek.

SecurityWeek – ​Read More

Chinese APTs Exploit EDR ‘Visibility Gap’ for Cyber Espionage

Blind spots in network visibility, including in firewalls, IoT devices, and the cloud, are being exploited by Chinese state-backed threat actors with increasing success, according to new threat intelligence. Here’s how experts say you can get eyes on it all.

darkreading – ​Read More

Taiwan charges Chinese ship captain with breaking subsea cables

The captain of a Chinese-crewed ship has been charged in Taiwan with breaking a subsea cable near the island, the first such formal charge following almost a dozen similar incidents in recent years.

The Record from Recorded Future News – ​Read More

Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed

Trend Micro researchers flagging problems with Nvidia’s patch for a critical, code execution vulnerability in the Nvidia Container Toolkit.

The post Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed appeared first on SecurityWeek.

SecurityWeek – ​Read More

A New ‘It RAT’: Stealthy ‘Resolver’ Malware Burrows In

A new infostealer on the market is making big waves globally, replacing Lumma et al. in attacks and employing so many stealth, persistence, and anti-analysis tricks that it’s downright difficult to count them all.

darkreading – ​Read More

Rep. Green on CISA cuts, China hacking and cyber as a bipartisan issue

The chair of the House Homeland Security Committee said his panel was prepared to take on pressing cyber policy challenges, like an estimated cyber workforce shortage of 50,000 professionals and burdensome digital compliance.

The Record from Recorded Future News – ​Read More

Hackers using AI-produced audio to impersonate tax preparers, IRS

Artificial Intelligence has supercharged an array of tax-season scams this year, with fraudsters using deepfake audio and other techniques to trick taxpayers into sending them money and financial documents.

The Record from Recorded Future News – ​Read More

Windows warning: Don’t delete that weird ‘inetpub’ folder. Already did? Here’s your fix

It may look empty, but that folder is tied to a new security patch – and it shouldn’t be removed.

Latest stories for ZDNET in Security – ​Read More

Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit

A threat actor claims to offer a zero-day exploit for an unauthenticated remote code execution vulnerability in Fortinet firewalls.

The post Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit appeared first on SecurityWeek.

SecurityWeek – ​Read More

New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations

Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities.

The post New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations appeared first on SecurityWeek.

SecurityWeek – ​Read More