CISA added Broadcom and Commvault vulnerabilities to KEV after confirming active exploitation.
Threat actors exploited Craft CMS zero-days CVE-2025–32432 and CVE-2024–58136, compromising 300 of 13,000 vulnerable servers.
Cybercriminals are targeting WooCommerce users with fake patch emails that use IDN homograph spoofing to deliver backdoor malware.
The FBI has asked the public for information on Chinese Salt Typhoon hackers behind widespread breaches of telecommunications providers in the United States and worldwide.
In October, the FBI and CISA confirmed that the Chinese state hackers had breached multiple telecom providers (including AT&T, Verizon, Lumen, Charter Communications, Consolidated Communications, and Windstream) and many other telecom companies in dozens of countries.
As revealed at the time, while they had access to the U.S. telecoms’ networks, the attackers also accessed the U.S. law enforcement’s wiretapping platform and gained access to the “private communications” of a “limited number” of U.S. government officials.
Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people.
VeriSource is a Texas-based employee benefits administration and HR outsourcing solutions provider with diverse clients across the U.S.
The firm has begun data breach notifications to impacted individuals about a cybersecurity incident that occurred in February 2024, but the impact of which it took them until April 2025 to evaluate.
Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures.
The announcement comes after OffSec lost the old repo signing key (ED444FF07D8D0BF6) and was forced to create a new one (ED65462EC8D5E4C5) signed by Kali Linux developers using signatures available on the Ubuntu OpenPGP key server. However, since the key was not compromised, the old one was not removed from the keyring.
When trying to get the list of latest software packages on systems still using the old key, users will see “Missing key 827C8569F2518CC677FECA1AED65462EC8D5E4C5, which is needed to verify signature” errors.
Microsoft is working on fully mitigating issues causing Outlook on the web and SharePoint Online users to experience delays or failures when searching.
Tracked under EX1063763 in the Microsoft 365 Admin Center, the issues are caused by infrastructure components responsible for processing users’ search requests that perform below acceptable performance thresholds.
The company first acknowledged this Exchange Online incident at 05:21 UTC, with the latest update published at 08:22 saying that a recently deployed fix should provide relief while Redmond’s engineers check if further optimizations are required to fully mitigate the search issues.
Internet services giant Cloudflare says it mitigated a record number of DDoS attacks in 2024, recording a massive 358% year-over-year jump and a 198% quarter-over-quarter increase.
These figures come from Cloudflare’s 2025 Q1 DDoS Report, where the company says it mitigated a total of 21.3 million DDoS attacks in 2024.
However, 2025 is looking to be an even bigger problem for online entities and companies, with Cloudflare already responding to 20.5 million DDoS attacks in just the first quarter of 2025.
Researchers have turned NASA’s Parker Solar Probe into a dark-matter detector, taking advantage of its close encounters with the Sun to search for dark-photon signals.
Dark matter is an elusive but consequential substance. It accounts for 27% of the total energy content of the Universe and plays a crucial role in the formation of cosmic structures, acting as the skeleton for the “cosmic web” of galaxies [1]. However, its nongravitational interactions with known particles remain a mystery. Among the many types of dark-matter particles that have been proposed, a compelling candidate is the ultralight dark photon [2]. Just as the photon mediates the electromagnetic force between electrically charged particles, the dark photon would mediate interactions between a hypothetical set of dark particles. Researchers have previously looked for dark photons using lab-based particle detectors and Earth-bound telescopes. But now Haipeng An from Tsinghua University in China and his colleagues have utilized a unique vantage point next to the Sun to search for a dark-photon signal [3].
Neutrinos have always been hard to explain – and now the detection of one so energetic it shouldn’t exist may help illuminate the strangest corners of the cosmos