Login Subscribe

Vulnerabilities & Exploits

AI‑Powered Zero‑Trust Auto‑Policy Engine Cuts Errors, Boosts Defense Speed

AI‑Powered Zero‑Trust Auto‑Policy Engine Cuts Errors, Boosts Defense Speed

VMware unveiled an AI‑driven platform that continuously watches network traffic, user behavior, and workload interactions across the enterprise. By correlating these data points, the system automatically creates and tunes zero‑trust access policies, aligning permissions with actual usage patterns without waiting for manual rule updates. The AI adapts in

VMware vDefend Adds Automated Micro‑Segmentation to Block Lateral Threats

VMware vDefend Adds Automated Micro‑Segmentation to Block Lateral Threats

VMware’s security team announced a major upgrade to its vDefend platform, embedding automated micro‑segmentation and continuous lateral‑movement monitoring into private‑cloud environments. The new capabilities automatically discover workloads, classify communication patterns, and enforce granular policies without manual rule creation, while a built‑in sensor watches for suspicious

Notepad++ Supply‑Chain Breach—Malicious Update Inserts Backdoor

Notepad++ Supply‑Chain Breach—Malicious Update Inserts Backdoor

Palo Alto Networks’ Unit 42 discovered that threat actors had compromised the official Notepad++ build pipeline. By inserting malicious code into the compilation process, they released a covert backdoor with legitimate installer packages. The hidden payload runs silently on victim machines, gathering system details and transmitting them to the attackers

Ivanti EPMM Zero‑Day Campaign Traced to One Hardened IP

Ivanti EPMM Zero‑Day Campaign Traced to One Hardened IP

Security researchers have identified a focused attack campaign exploiting two critical Ivanti EPMM flaws—CVE‑2026‑1281 and CVE‑2026‑1340. The entire operation originates from a single, heavily fortified IP address that has been used to target high‑profile European public‑sector organizations. The attackers achieve unauthenticated remote code

Amaranth‑Dragon Exploits CVE‑2025‑8088 to Target SE Asian Critical Infrastructure

Check Point Research has identified the APT group Amaranth‑Dragon actively weaponizing the newly disclosed CVE‑2025‑8088 flaw. The actors are leveraging sophisticated multi‑stage payloads—initial spear‑phishing lures, custom‑crafted exploits, and fileless loaders—to gain footholds in ministries, energy utilities, and related supply‑chain networks across

AI‑Powered Zero Trust Automates Policy, Shrinks Attack Surface

AI‑Powered Zero Trust Automates Policy, Shrinks Attack Surface

VMware unveiled an AI‑driven platform that ingests user and device behavior data, then automatically creates and tunes granular zero‑trust access policies. The system continuously scores risk, revokes or grants permissions in real time, and updates policy rules without any manual input, effectively turning behavioral insight into enforceable controls.

VMware’s vDefend Adds Real‑Time Lateral‑Movement Blocking for Private Clouds

VMware’s vDefend Adds Real‑Time Lateral‑Movement Blocking for Private Clouds

VMware introduced vDefend, a new security layer that brings zero‑trust micro‑segmentation to private cloud environments. By continuously analyzing workload traffic with AI‑driven analytics, the platform automatically detects anomalous lateral‑movement patterns and enforces isolation policies without manual intervention. For defenders, vDefend means faster containment of ransomware, credential‑

CrowdStrike flags six zero‑day patches, RDP exploit threatens Windows servers

CrowdStrike flags six zero‑day patches, RDP exploit threatens Windows servers

CrowdStrike’s February 2026 Patch Tuesday analysis uncovered six zero‑day vulnerabilities that were actively exploited before Microsoft issued patches. The most critical is a Remote Desktop Services flaw (CVE‑2026‑21533) that allows attackers to bypass authentication and execute code with system‑level privileges on vulnerable Windows servers. Evidence