Security researchers have found a critical vulnerability (CVE-2025-22457) in Ivanti Connect Secure VPN appliances, exploited by suspected Chinese group UNC5221 since mid-March 2025. This buffer overflow flaw allows remote code execution and leads to the deployment of advanced malware, including TRAILBLAZE and BRUSHFIRE. Organizations are advised to upgrade to version 22.7R2.6 to mitigate risks.

Valley Man Who Sold Spying Malware, Pleads To Conspiracy
A man from Van Nuys has confessed to conspiring to sell malware, known as Hive RAT, that allowed buyers to illegally access computers, stealing personal