News

The article discusses the reintroduction of Microsoft's controversial Workplace Check-in feature for Microsoft Teams that allows tracking employee presence based on Wi-Fi connections. Initially criticized for corporate surveillance, Microsoft modified its…

The article discusses the UNK_DeadDrop phishing campaigns targeting software developers, assessed to be orchestrated by North Korea-aligned hackers. These attacks leverage fake job offers and code review requests to infiltrate companies and steal sensitive…

The article discusses the rise of malware distributing through 'Wallpaper Engine' on the Steam Workshop, targeting mainly gamers in China and Russia. Attackers exploit the app's ability to share custom wallpapers, embedding malware within them. Popular types…

The page discusses new features in Telegram that enhance bot capabilities through improved HTML and Markdown formatting, enabling developers to create richer, interactive content. Key enhancements include support for complex text structures, multimedia…

The FBI warns that scams involving cryptocurrency investment are escalating, with fraudsters using cash pickups by couriers to circumvent bank checks. Victims are lured through unsolicited communications, often believing they need to pay 'fines' or upscale…

The article discusses the use of fake Microsoft alerts to deploy NarwhalRAT malware by North Korean attackers. This malware allows remote access to infected systems, posing significant security threats. The report emphasizes the growing sophistication of…

In recent months, the threat actor known as Fluffy Wolf has intensified phishing attacks targeting various sectors in Russia, including construction and e-commerce. These attacks utilize deceptive emails containing malicious RAR attachments and GitHub links…

The curl project has announced a month-long pause on accepting vulnerability reports, dubbed the "curl summer of bliss," from July 1 to August 3, 2026, to allow the team to rest after extensive workloads. During this period, urgent issues will still be…

A cyberespionage group linked to China, known as UNC6508, infiltrated North American medical research networks for over two years, starting from September 2023. This group was discovered in November 2025, indicating a lack of visibility in network defenses.…

AMD's Transparent Secure Memory Encryption (TSME), introduced in 2016, has been removed from mid-range and entry-level Ryzen processors through recent BIOS updates, with no public explanation or mention in release notes. TSME, which provided robust memory…

Novo Nordisk experienced a significant data breach where attackers accessed and stole sensitive information, including fully trained AI models, proprietary datasets, training codebases, and logs. The hackers claimed to have exfiltrated 16.7GB from a project…

A class-action lawsuit has been filed against Anthropic by Karl Kahn in the U.S. District Court for Northern California, claiming deceptive advertising regarding their Claude Max subscription limits. The lawsuit alleges that both the $100 5x usage plan and…

The article, authored by Xavier Mertens, discusses a cybersecurity threat involving a malicious ZIP file that, when extracted, reveals a VHDX file containing obfuscated JavaScript. This JavaScript leverages WMI to execute a PowerShell script, bypassing…

The article discusses the emergence of the MLTBackdoor malware family, identified by Zscaler ThreatLabz, which employs sophisticated evasion tactics and social engineering to infiltrate corporate environments. It highlights a multi-stage delivery mechanism…

Cisco has released important security updates addressing a significant vulnerability in its SD-WAN Manager that is currently being exploited. Organizations using this software should promptly apply these updates to mitigate potential attacks. The updates are…

The article discusses a critical vulnerability in the LiteSpeed cPanel plugin that can be exploited for root privilege escalation, as flagged by CISA. It emphasizes the need for server security measures to prevent such attacks. Highlights include the urgent…

The Tornado web framework has addressed three critical security vulnerabilities in its version 6.5.6 update. The most severe issue (CVE-2026-49853) is a credential leak where the SimpleAsyncHTTPClient retains the original Authorization header during…

The article discusses a critical remote code execution (RCE) vulnerability in the Vitest testing framework, tracked as CVE-2026-53633, with a CVSS score of 9.8. The vulnerability arises from the Browser Mode's cdp() API, which allows attackers to bypass…

A serious vulnerability in the Haskell TLS library (CVE-2026-9648) poses risks to secure communications in finance and enterprise systems. The flaw stems from the crypton-x509-validation library's failure to enforce X.509 NameConstraints, allowing attackers…

The ISC Stormcast for June 16th, 2026, is presented by handler Xavier Mertens with a current threat level classified as green. Listeners can learn more about Dr. Johannes Ullrich and the classes he teaches for SANS via provided links. Additional features on…

CISA has revealed seven serious vulnerabilities in Naxclow IoT products, including popular smart doorbells and cameras, which allow attackers to hijack devices and access sensitive information. The most critical issue, CVE-2026-28742, is linked to a…

The content discusses two critical security vulnerabilities in FreeSWITCH, an open-source telecom stack, identified as CVE-2026-49841 and CVE-2026-49840. Both are heap buffer overflow bugs that can lead to crashes and possible remote code execution without…

A critical vulnerability (CVE-2026-48611) in phpBB allows unauthenticated attackers to log in as any user, including administrators, compromising numerous online communities. The flaw exists in phpBB's OAuth implementation, requiring only the target's…

The article "Inside the Modern SOC: The 72-Minute Race" from Unit 42 explores the rapid acceleration of cyberattacks, highlighting that attackers can move from initial access to data exfiltration in as little as 72 minutes due to advancements in AI. It…

The article discusses the findings of a recent threat hunting operation that uncovered a malicious infrastructure distributing EtherRAT malware, phishing pages, and other malicious software. EtherRAT, developed in Node.js, is a Remote Access Trojan (RAT)…

The article discusses a cybersecurity breach where Chinese hackers exploited Google Workspace rules to steal sensitive emails related to research and defense. This incident highlights vulnerabilities in email security protocols and underscores the importance…

North Korean hackers are increasingly using developer tools as channels for delivering malware, exploiting trusted platforms to bypass security measures. This trend poses significant risks as it can make detection difficult, thereby complicating defenses…

The article discusses a recently discovered Microsoft Copilot attack named 'SearchLeak', which allows attackers to exfiltrate files like emails and documents with a malicious link. This three-stage attack leverages a specific URL structure, enabling prompt…

Mackay Sugar, Australia's second-largest sugar producer, reported a cyberattack on June 10, 2026, affecting key operations during the critical crushing season. Two of its three mills were offline, prompting the company to engage cybersecurity experts and…

AMD has removed the Transparent Secure Memory Encryption (TSME) feature from its consumer CPUs, a change that has surprised and frustrated users. Initially introduced to protect against physical data threats, TSME was available on lower-end Ryzen chips,…

A recent supply-chain attack has targeted popular WordPress plugins, compromising over 1.2 million sites. The malware, identified by Sansec, affected JavaScript files in OptinMonster, TrustPulse, and PushEngage. Upon detection of an admin account, the…

A recent report highlights that 95% of Chief Information Security Officers (CISOs) feel pressured to delay or suppress the disclosure of negative security findings. This pressure arises from various sources including the board, PR teams, and C-level…