Login Subscribe

Vulnerabilities & Exploits

CrowdStrike Tops Gartner Peer Insights as Preferred ASPM Tool for Defenders

CrowdStrike Tops Gartner Peer Insights as Preferred ASPM Tool for Defenders

CrowdStrike was named a Customers’ Choice in the 2026 Gartner Peer Insights Voice of the Customer report for Application Security Posture Management (ASPM) solutions. The award reflects strong user feedback that the platform excels at surfacing and ranking vulnerabilities based on real‑world exploitability, delivering comprehensive asset visibility, and correlating

Amaranth‑Dragon Exploits WinRAR CVE‑2025‑8088 for Southeast Asian Espionage

Amaranth‑Dragon Exploits WinRAR CVE‑2025‑8088 for Southeast Asian Espionage

A China‑linked threat group identified as Amaranth‑Dragon is leveraging the recent WinRAR vulnerability (CVE‑2025‑8088) to distribute malicious RAR archives. The crafted archives execute a payload that gains elevated execution rights and establishes persistence on compromised systems. The campaign targets organizations across Southeast Asia, using the flaw

vDefend Brings Real‑Time Zero‑Trust Lateral Defense to VMware Private Cloud

vDefend Brings Real‑Time Zero‑Trust Lateral Defense to VMware Private Cloud

VMware announced vDefend, a new security layer that extends zero‑trust principles to workloads running in private clouds. The solution continuously monitors inter‑VM traffic, applying behavioral analytics to spot deviations that indicate malicious lateral movement. When an anomaly is detected, vDefend automatically triggers micro‑segmentation policies to quarantine the

Inside the Mind Games Powering Modern Phishing Attacks

Inside the Mind Games Powering Modern Phishing Attacks

Unit42’s latest investigation dissects how threat actors weaponize basic human instincts—authority, urgency, and social proof—to drive phishing success. By impersonating senior executives, exploiting time‑sensitive crises like supply‑chain disruptions, and mimicking trusted colleagues, attackers create believable narratives that compel recipients to click malicious links or disclose

Open‑Source Tool Abuse Fuels Global Cyber Attacks, CISA Warns

The Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory highlighting a surge in the use of publicly available, open‑source utilities by threat actors worldwide. The report catalogs dozens of tools—such as remote administration frameworks, data‑exfiltration scripts, and ransomware loaders—that adversaries repurpose to breach networks, move

Falcon Secures Perfect Score in SE Labs Ransomware Test

Falcon Secures Perfect Score in SE Labs Ransomware Test

CrowdStrike’s Falcon platform was put through SE Labs’ most demanding ransomware simulation, which featured a wide array of current ransomware families and advanced evasion tactics. Falcon identified and blocked every malicious payload, earning a flawless 100% detection and mitigation rating. For defenders, this result validates Falcon’s ability to

Critical SolarWinds Web Help Desk Flaw Actively Exploited

Critical SolarWinds Web Help Desk Flaw Actively Exploited

A zero‑day vulnerability in SolarWinds Web Help Desk (WHD) is being probed in the wild. The flaw allows unauthenticated attackers to inject and execute arbitrary code on the WHD server, potentially compromising the ticketing system and any remote support sessions that rely on it. Because WHD is widely deployed

Amaranth‑Dragon Leverages New WinRAR Flaw to Target SE Asia Infrastructure

Amaranth‑Dragon Leverages New WinRAR Flaw to Target SE Asia Infrastructure

Check Point researchers have uncovered an active campaign by the Amaranth‑Dragon group, an offshoot of the APT‑41 nexus, that weaponizes the newly disclosed CVE‑2025‑8088 vulnerability in WinRAR. The actors distribute malicious RAR archives; when a victim extracts the archive, the embedded payload executes automatically, establishing persistence