Topic: attack lifecycle
-
Sitecore Zero-Day Exploit Actively Attacked (CVE-2025-53690)
A critical zero-day vulnerability (CVE-2025-53690) in Sitecore on-premises deployments is being actively exploited, allowing unauthorized access and remote code execution. Attackers leverage a known sample ASP.NET machine key to exploit ViewState deserialization, enabling them to deploy malware, ...
Read More » -
Chinese Spies Used AI to Automate 90% of Cyberattacks, Report Says
A state-sponsored Chinese group used an advanced AI system to autonomously perform 80-90% of the tactical work in a multi-stage cyberattack, marking a significant shift in AI weaponization. The attackers leveraged open-source tools and manipulated the AI through social engineering to bypass ethic...
Read More »