Understand the risks of Windows shortcut vulnerabilities and how they can be exploited in cyber espionage operations.

Lexmark CVE-2025-1127 flaw allows remote code execution via embedded web server. Affects many printer models—patch firmware to version .240.206+ now.

XDSpy, a covert cyber-espionage group, is back with a sophisticated campaign targeting governments, leveraging an obscure Windows LNK file parsing flaw and new XDigo malware

Trend Micro discovered that Axis Communications leaked hardcoded Azure SAS tokens in a signed DLL for its Autodesk Revit plugin, exposing three cloud storage accounts to unauthorized access.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Researchers at Arctic Wolf Labs have uncovered an extensive cyber espionage campaign by UNC6384, a Chinese-affiliated threat actor, targeting European diplomatic entities across Hungary, Belgium, …

Pwn2Own Berlin 2026 reportedly hit capacity as AI-assisted exploit research accelerated zero-day discoveries and public disclosures.

Cybersecurity researchers demonstrated 47 unique zero-day exploits at Pwn2Own Berlin 2026, targeting major enterprise software and AI platforms.