Critical Vulnerability in SolarWinds Web Help Desk Under Active Exploitation
A critical vulnerability in SolarWinds Web Help Desk is being actively exploited, prompting urgent patching requirements for U.S. federal agencies.
Category Security & Privacy
Ciberseguridad, vulnerabilidades y privacidad
Critical Vulnerability in React Native Metro Server Under Active Exploitation
A serious vulnerability in the React Native Metro development server is being exploited to deliver malware to Windows and Linux systems, raising concerns among security researchers about the lack of public acknowledgment.
AI Agents Assist in Cyberattacks, But Full Autonomy Remains Elusive
Recent findings indicate that while AI systems can assist in cyberattacks, fully autonomous operations have not yet been realized.
Microsoft Ends Support for TLS 1.0 and 1.1 in Azure Storage
As of February 3, 2026, Microsoft has officially deprecated TLS 1.0 and 1.1 for Azure Storage, mandating the use of TLS 1.2 or newer for secure communications.
French Police Conduct Raid on X Offices Amid Algorithmic Manipulation Investigation
French authorities have raided the Paris offices of X, formerly Twitter, as part of an investigation into alleged algorithmic manipulation by foreign entities.
Notepad++ Update Hijacked by Chinese Espionage Group
A recent incident involving Notepad++ has been linked to a Chinese state-sponsored group known as Lotus Blossom, which exploited vulnerabilities in the software's update infrastructure to deploy a new backdoor named Chrysalis.
Ivanti Addresses Critical Zero-Day Vulnerabilities in EPMM
Ivanti has released patches for two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) product, which are currently being exploited. Organizations using this software are urged to take immediate action.
cyber espionage: Iran-Linked RedKitten Cyber Campaign Targets Human Rights NGOs and Activists
A new cyber campaign, codenamed RedKitten, has emerged, targeting NGOs and individuals documenting human rights abuses in Iran. This operation is linked to a Farsi-speaking threat actor aligned with Iranian state interests.
malware: Malicious Chrome Extensions Target Affiliate Links and ChatGPT Tokens
Recent findings reveal a series of malicious Chrome extensions that hijack affiliate links and steal ChatGPT authentication tokens, impacting users across various e-commerce platforms.
ThreatsDay Bulletin: Recent Cybersecurity Developments
This week's cybersecurity updates highlight significant incidents and vulnerabilities affecting various platforms and services.
