VMware vCenter RCE Vulnerability Exploited
A critical vulnerability in VMware vCenter is being exploited to deploy a reverse SSH tool, with 361 IP addresses compromised across 47 countries.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
A critical vulnerability in VMware vCenter is being exploited to deploy a reverse SSH tool, with 361 IP addresses compromised across 47 countries.
Research from XBOW shows that mid-tier AI models are becoming strategically important in the offensive security ecosystem, posing a greater threat over the long term due to their cheapness and ability to provide net value at a lower cost.
A market for removing AI watermarks has emerged, but most tools cannot prove their effectiveness, as Anthropic has not released its detector to verify the removal of the watermark.
A newly-signed presidential memorandum enlists private sector companies in federal law enforcement hacking operations, raising concerns among cyber experts about legal, practical, and moral pitfalls.
Security researchers have disclosed a new 'Plug and Pwn' attack that abuses the Windows Plug and Play feature to gain SYSTEM privileges.
A new Android malware combo uses SpyNote and WindRelay to steal card data and take out loans in victims' names, with transactions approved in just 13 minutes.
An ongoing data theft campaign, dubbed City-Forum, targets Salesforce and ServiceNow portals, exploiting overly permissive sharing rules and permissions to steal data exposed to anonymous users.
WhatsApp has rolled out a new optional 'Scam Alert' feature that uses a local machine learning model to warn users of potential scam messages.
CISA orders federal agencies to patch CVE-2026-68820, a Windows vulnerability exploited by North Korean hackers in the 'Dream Job' campaign, by August 25.