The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of…

Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen.

While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific areas of risk…

INC ransomware wasn’t the first group to exploit the zero-days, but it’s been the most assertive and effective in chaining both vulnerabilities to steal and encrypt data…

Researchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects.

The company forewarned customers and defenders that a flood of defects would be uncovered by AI. It delivered with a striking exponential increase.

Proofpoint researchers said attackers targeted physics and engineering departments, and warn that the campaign is likely ongoing.

The AI agent didn’t accomplish every step in the late June 2026 attack, but it allowed the threat actor to significantly reduce complexity, speed up the tempo…

The defect impacts a popular collection of business applications that attackers have hit before in widespread attack sprees.

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breached.