security

CVE-2025-32975: Quest KACE SMA SSO Authentication Bypass Enables Admin Takeover Quest KACE Systems Management Appliance (SMA) has a maximum-severity vulnerability, CVE-2025-32975, that allows an attacker to bypass authentication in the product’s SSO authentication handling. An unauthenticated attacker can potentially impersonate legitimate users and work toward full administrative takeover. Reporting in March 2026 tied suspicious, real-world […]

Crunchyroll Alleged Data Breach: What Do Users Need to Know? Reports of a possible Crunchyroll (A popular anime streaming platform) data breach have drawn attention after claims surfaced that a threat actor may have accessed user-related data and internal support information. Crunchyroll has not publicly confirmed the full scope of those claims, so the story […]

The flaws could allow attackers to access sensitive information, execute code, or cause unexpected behavior.

The post QNAP Patches Four Vulnerabilities Exploited at Pwn2Own  appeared first on SecurityWeek.

Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.

The post Tycoon 2FA Fully Operational Despite Law Enforcement Takedown appeared first on SecurityWeek.