A previously unknown remote code execution vulnerability in the Ivanti Connect Secure VPN platform is being actively exploited in the wild by Chinese threat actors, prompting alerts from Google’s Mandiant team

Sites mimicking DeepSeek, AutoCAD, UltraViewer and more lead to remote system access.

Fast flux lets attackers set up complete C2 ops inside an enterprise network, prompting security pros to say it’s a “big-time wakeup call.”

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is sounding the alarm over a series of high-risk vulnerabilities present in industrial control systems

Twenty bugs in GRUB2, U-boot and Barebox were found in an AI-assisted process.

The bad actor’s TTPs closely align to the Storm-1811 threat group identified last year by Microsoft, say Ontinue researchers.

Attackers aim to find zero-days in the PAN-OS gateways they can exploit.

As identity threats surge and regulations tighten, Identiverse 2025 brings the digital identity security community together to decode what’s next—and who’s leading the charge.