Cybercriminals are exploiting a critical vulnerability (CVE-2024-53704) in SonicWall firewalls, enabling unauthorized access to corporate networks after a proof-of-concept was released. Meanwhile, the Chinese APT group Mustang Panda targets a new unpatched Windows zero-day vulnerability, raising concerns over security and espionage risks for organizations worldwide. Immediate action is urged.

A massive brute force attack has targeted VPN devices using 2.8 million IP addresses, impacting security worldwide. Concurrently, Hospital Sisters Health System experienced a data breach affecting 883,000 individuals, exposing sensitive personal information.

Google has reported that state-sponsored hacking groups are increasingly utilizing its Gemini AI for enhancing cyber operations, primarily focusing on reconnaissance and scripting rather than conducting attacks. Meanwhile, Texas has banned the use of Chinese AI platforms DeepSeek and RedNote on government devices, citing security and foreign influence concerns.

A recent security campaign has targeted 18,000 low-skilled hackers, or “script kiddies,” with a fake malware builder that installs a backdoor. Meanwhile, Microsoft warns that outdated Exchange servers are exposed due to deprecating a security certificate, emphasizing the necessity for timely updates to mitigate threats.

Trump halted the TikTok ban through an executive order, allowing ByteDance more time for a potential sale amid national security concerns. Meanwhile, Fortinet announced critical vulnerabilities affecting its products, including a zero-day flaw, prompting immediate patch releases and advising organizations on timely updates and monitoring for compromises.

Ivanti has reported two critical zero-day vulnerabilities in its Connect Secure products, with one already exploited. Customers are urged to upgrade their systems immediately. Meanwhile, Telegram’s increased data sharing with law enforcement raises concerns about user privacy and encryption integrity, potentially eroding trust among its privacy-focused user base.