Multiple vulnerabilities have been discovered in VMware Aria Operations and VMware Tools, the most severe of which could allow attackers to escalate privileges all the way to root. That means full control: installing programs, viewing or deleting data, and creating new accounts with complete user rights. Even worse, one of these flaws has already been exploited in the wild as a zero‑day since October 2024.

If you thought fonts were just about picking between Helvetica and Comic Sans, think again. In Apple’s latest round of security updates, the company patched a critical flaw where a maliciously crafted font could crash apps, corrupt memory, and potentially open the door to more serious exploits. Yes—fonts are now a cybersecurity threat.

I swear I don’t try to pick on SonicWall… but they make it so easy when they keep showing up in the news. The latest headline? Akira ransomware operators are breaking into SonicWall VPNs—even when one-time password (OTP) multi-factor authentication (MFA) is enabled. That’s right: even if you patched, even if you enabled MFA, attackers may still be waltzing right in.