For individuals

Rapid7 researchers have disclosed how attacks aimed at vulnerable Ivanti Connect Secure VPN instances impacted by the critical flaw, tracked as CVE-2025-22457, could result in remote code execution less than a week after a Chinese threat operation was observed by Mandiant to have leveraged the bug, according to SecurityWeek.

Already patched Fortinet FortiGate devices impacted by the CVE-2022-42475, CVE-2023-27997, and CVE-2024-21762, continued to provide read-only access to threat actors who established a symbolic link between the user file system and root file system in a file containing the SSL-VPN's language files, reports The Hacker News.

Cybernews reports that major cybercrime forum Cracked.io has resumed operations under the new Cracked[.]sh domain over two months after it was sequestered alongside three other dark web marketplaces as part of the international law enforcement effort dubbed Operation Talent.

Stealthier Tycoon2FA phishing kit appears as PhaaS platforms fuel SVG exploitation Threat detection and endpoint security systems are being better evaded by a new iteration of the Tycoon2FA phishing-as-a-service kit, reports BleepingComputer.

DigitalOcean executives describe how they automated and streamlined many of the identity and access management functions that had been previously handled manually.

A threat actor has claimed responsibility for the alleged politically motivated attack and has uploaded the stolen data to a Dark Web forum.

The $40 million startup was relying on manpower in the Philippines to run the so-called "AI" tool.

A new PowerShell backdoor and persistence technique that hijacks TypeLib were discovered.

Nations continue to sign the Code of Practice for States in an effort to curb commercial spyware, yet implementation and enforcement concerns have yet to be figured out.