News

The article discusses a recent incident where an AI agent exploited a Remote Code Execution (RCE) vulnerability in Langflow to automate a database ransomware attack. Such attacks highlight the growing intersection of artificial intelligence and cybersecurity…

The 2025 Kaspersky Compromise Assessment findings highlight key trends in cybersecurity, including the prolonged detection of incidents and the insufficient monitoring practices within organizations. Notably, 30.8% of incidents revealed activities lasting…

A critical alert has been issued regarding vulnerabilities in GNU gzip, specifically CVE-2026-41991 and CVE-2026-41992. The first vulnerability allows local attackers to overwrite files through a predictable symlink, while the second involves an…

The article reports on the FortiBleed credential theft linked to INC and Lynx ransomware operations, highlighting the increased vulnerabilities within organizations due to outdated security measures. It emphasizes the importance of Zero Trust frameworks to…

Acronis Threat Research Unit uncovered two espionage campaigns by Mustang Panda, targeting Indian government and hydropower sectors using Zoho WorkDrive for command and control (C2). These campaigns involved spear-phishing attacks with ZIP archives…

CVE-2026-8037 is a critical vulnerability affecting Progress Kemp LoadMaster, enabling pre-authenticated Remote Code Execution (RCE) via OS command injection through the product’s API. Active exploitation attempts began on June 29, 2026, coinciding with the…

The article discusses the emergence of a new Remote Access Trojan (RAT) named ChocoPoC, which specifically targets vulnerability researchers through fake proof-of-concept (PoC) exploit repositories. This malware pretends to offer legitimate PoCs while…

The article discusses the rise of The Gentlemen ransomware-as-a-service (RaaS) group, which has seen significant activity in 2026. Key points include: The group targets large organizations in sectors such as manufacturing, IT, healthcare, finance, and…

The pro-Russia influence ecosystem has expanded its global focus, engaging in covert operations, hacktivism, and leveraging generative AI to manipulate information. Targeting audiences in the US, EU, NATO, and Russia, these activities are characterized by…

Trend Micro identified a new malware named TONResolver targeting Booking.com partner hotels primarily in Japan, using phishing tactics that pose as guest complaints to deliver the malware. The attackers utilize a ZIP file containing a shortcut that executes…

An active exploit has been detected for CVE-2026-10109, a critical remote code execution vulnerability in IBM Db2 affecting versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4. The flaw allows unprivileged remote attackers to execute arbitrary code through a…

Cisco has patched a critical vulnerability in the Catalyst Center (CVE-2026-20191, CVSS 7.5) allowing unauthenticated remote attackers to read arbitrary files, posing a significant risk to enterprise networks. Additionally, seven vulnerabilities in ClamAV…

A critical security vulnerability identified as CVE-2026-54588 affects Poweradmin, scoring 9.6 on the CVSS scale. It allows attackers to exploit host header injection during login processes, potentially compromising DNS administrator accounts. Affected…

The ISC Stormcast for July 2nd, 2026, is presented by handler Xavier Mertens. The current threat level is indicated as green. Additional resources include information on classes being taught by Dr. Johannes Ullrich. Listeners can join the discussion through…

A critical vulnerability, tracked as CVE-2026-45051, has been identified in OpenAM, scoring 9.2 on the CVSS scale. This flaw allows for remote code execution (RCE) through unsafe Java deserialization in the WebAuthn authentication module. Affected versions…

A critical vulnerability (CVE-2026-35019) affecting NetComm NF20MESH routers was disclosed, allowing unauthorized access due to hardcoded AES key authentication bypass. The CVSS score is 9.2, indicating high severity. The flaw can grant admin access to the…

A critical vulnerability, CVE-2026-14191, has been identified in RARLAB's WinRAR software, affecting versions below 7.23. This vulnerability is a heap overflow in the RAR5 recovery-volume parser, which can lead to potential exploits, although no active…

JetBrains has reported three critical vulnerabilities affecting its products, specifically CVE-2026-50242 (authentication bypass), CVE-2026-56142 (privilege escalation), and CVE-2026-53915 (remote code execution), with severities rated up to 10.0 on the CVSS…

The article discusses sophisticated phishing campaigns that tailor their attacks based on the victim's device and operating system. Attackers use user-agent data to fingerprint victims, leading to increased success rates as the campaigns deploy OS-specific…

A fake Chrome extension named 'Search for perplexity ai' was discovered to be spying on users' search queries by routing their traffic through a fraudulent domain. The extension recorded user data such as IP addresses, browser headers, and user-agent…

A critical vulnerability in Oracle E-Business Suite, designated as CVE-2026-46817, is currently being exploited, with around 950 vulnerable systems exposed on the internet. The flaw allows unauthenticated attackers to take over affected systems. Oracle has…

The article discusses the rise of the ClickFix social engineering technique, which has become the preferred method for malware delivery among threat actors. Research from ReliaQuest highlights that ClickFix has transitioned from an emerging tactic in 2024 to…

The article discusses a critical security flaw in the unpatched Argo CD Repo-Server that allows attackers to potentially take control of Kubernetes clusters. It emphasizes the importance of addressing this vulnerability to prevent unauthorized access and…

The article discusses the extradition of a 19-year-old suspect linked to the Scattered Spider hacking group, who faces charges in the U.S. related to cybercrime and ransomware activities. It highlights the increasing prevalence of cyber threats, particularly…

Microsoft has introduced a new Teams admin policy to enhance security regarding external bots in meetings. This policy allows organizations to manage and control bot participation by requiring explicit confirmation from meeting organizers before bots can…

The article discusses the exploitation of SEO-poisoned software sites to deploy AsyncRAT via ScreenConnect. It highlights how cybercriminals utilize popular software sites to lure users into downloading malicious software. Key points include the techniques…

The article discusses the VEIL#DROP malware chain utilizing the Blogger platform to deliver the PureLogs Stealer. It highlights the methods used by the malware to infiltrate systems, emphasizing recent trends in cybersecurity where such malware exploits…

NVIDIA has issued critical software patches addressing 13 newly disclosed vulnerabilities in its product lines, particularly affecting BlueField, ConnectX, and Megatron Bridge platforms. Some vulnerabilities, such as CVE-2025-23351, could allow local…

The Kemp LoadMaster RCE vulnerability (CVE-2026-8037) was exploited starting June 29, 2026, coinciding with the release of proof-of-concept exploit code. This severe flaw allows unauthenticated attackers to execute commands as root, risking broader system…

NASA's inspector general has indicated that Boeing's Starliner crew capsule is likely to be delayed until next year for operational certification, which is nearly a decade behind its original 2017 target. This delay comes as the timeline for the ISS's…

The Microsoft blog post highlights the company's recognition as a leader in Frost & Sullivan’s 2026 Frost Radar for Cloud and Application Runtime Security. It emphasizes a shift in cloud security from mere visibility and compliance to an operational…

The article discusses the emergence of the Ousaban banking Trojan, which is targeting users of Iberian banks through sophisticated phishing tactics involving fake PDF documents. The malware aims to steal sensitive banking information, highlighting the…

Adobe has released patches for seven vulnerabilities, each with a critical CVSS score of 10.0, affecting ColdFusion and Campaign Classic. These flaws could allow attackers to execute arbitrary code and gain unauthorized access to systems, emphasizing the…