News

A recent security alert has identified a new remote access trojan (RAT) called PackClient, linked to the Chinese-speaking threat actor TA4922. This malware is being distributed through tax-themed phishing emails targeting organizations mainly in China and…

SonicWall has reported two critical zero-day vulnerabilities affecting its SMA1000 series secure remote access gateway and SSL-VPN appliances. The vulnerabilities, CVE-2026-83548 (CVSS score 10) and CVE-2026-83549 (CVSS score 7.8), have been actively…

A critical alert has been issued regarding recent vulnerabilities in Google Chrome, with version 152.0.7977.75 addressing 26 security flaws. Key vulnerabilities include CVE-2026-84353, which allows memory corruption and code execution. Users are urged to…

A critical vulnerability in the Hugging Face Transformers library (CVE-2026-80047) allows unauthorized code to be written to local disks without user consent. This affects library versions 4.49.0 through 5.8.1, enabling attackers to cache malicious code when…

The article discusses a critical cybersecurity alert regarding the Amatera password stealer, which exploits hundreds of compromised WordPress websites to distribute malware. Connected to the ErrTraffic Malware-as-a-Service ecosystem, attackers use a rogue…

The content provides an update from the Internet Storm Center (ISC) featuring handler Brad Duncan. The threat level is currently indicated as green, suggesting a low risk of threats. Additionally, there is a mention of a podcast episode for September 2nd,…

The page discusses a critical Linux kernel vulnerability identified as CVE-2026-68162, which affects the Stream Control Transmission Protocol (SCTP) networking code and has a CVSS score of 7.8. The flaw allows low-privileged users to escalate their…

Debian 11 Linux has officially reached the end of its long-term support on August 31, 2026, concluding its five-year support lifecycle. Users are urged to upgrade to later versions, such as Debian 12 or 13, which will receive free security updates until…

Two critical vulnerabilities in FreeRDP version 3.31.0 have been identified: an authentication bypass and a remote code execution (RCE) exploit. The patched version addresses five server-role flaws, with potential impacts on various Linux remote desktop…

A recent alert highlights two active exploits related to PaperCut NG/MF vulnerabilities, labeled CVE-2026-82078 and CVE-2026-81578. Additionally, the article discusses the open-source Darwin-VM project by developer JPRX, designed to run genuine iOS and macOS…

A recent cyberattack targeted a nuclear agency in the Philippines, exploiting long-unpatched vulnerabilities in widely used software, leading to the theft of sensitive data such as reactor databases and personnel records. Researchers identified that a threat…

A critical alert has been issued regarding two active vulnerabilities in PaperCut NG/MF. The main focus is on a trade secret lawsuit between Apple and OpenAI, where Apple claims a former employee, Chang Liu, misappropriated trade secrets for OpenAI hardware…

Hewlett Packard Enterprise (HPE) has disclosed several critical vulnerabilities, specifically in HPE Fabric Composer, that could allow unauthenticated attackers to execute arbitrary code and bypass authentication. The reported vulnerabilities have a maximum…

Microsoft Defender Experts are tracking a malware campaign utilizing counterfeit software-download websites that impersonate trusted vendor pages to distribute malicious installers. This campaign primarily targets Chinese-speaking users and organizations…

The content discusses two critical vulnerabilities affecting the SonicWall SMA1000 product, identified as CVE-2026-83548 (pre-authentication SSRF) and CVE-2026-83549 (post-authentication remote code execution). CVE-2026-83548 has a CVSS score of 10.0 and…

A critical vulnerability, CVE-2026-82329, has been discovered in JFrog's Artifactory software, allowing attackers to bypass authentication and gain administrative access without user interaction. Disclosed on August 28, the flaw has a CVSS score of 9.8 and…

The article discusses the rising trend of insider-assisted ransomware attacks, highlighting the dual threat posed by malicious insiders and negligent employees. Organizations are strengthening their cybersecurity measures, yet cybercriminals exploit human…

A critical vulnerability, CVE-2026-0768, has been heavily exploited in the low-code AI development platform Langflow, marking a significant uptick in attacks. This remote code execution flaw, rated 9.8 on the CVSS, was first disclosed in January by Trend…

Palo Alto Networks has acquired Console, an AI-native platform that automates operational tasks using natural language, enhancing its Cortex platform's capabilities. This acquisition aims to allow security teams to interact with data more effectively and…

A security nonprofit, METR (Model Evaluation and Threat Research), disclosed two recent cybersecurity incidents involving credential theft and exposure of evaluation data. In March, attackers stole an API key, leading to the consumption of approximately…

The Cybersecurity Incident Response Readiness Workshop by Microsoft's DART team aims to enhance organizations' incident response (IR) capabilities through collaborative, scenario-based training. This workshop allows participants to evaluate and test their IR…

Sevii has enhanced its Autonomous Defense & Remediation (ADR) platform by introducing a new AI security module designed to counteract AI-driven attacks. This module operates in real-time, autonomously responding to threats by analyzing alerts from the…

The US Coast Guard has launched the Office of Maritime Cybersecurity Policy (CG-MCP) to address growing cyber risks in the maritime sector due to increased reliance on information and operational technology. This office will oversee the development of…

The article discusses a critical vulnerability in JFrog Artifactory that was exploited by attackers shortly after its disclosure. This flaw allows them to mint admin tokens, posing significant risks for identity security. Various expert insights and…

Proxmox has issued an advisory regarding a critical authentication bypass vulnerability in Proxmox VE versions 7.0 to 7.4. This flaw, which allows attackers to log in as root without a password, has been actively exploited. Affected users are urged to…

The page discusses a critical vulnerability (CVE-2026-35029) in the LiteLLM AI gateway, which allows unauthorized access and server takeover. The flaw stems from missing authentication checks on critical configuration routes, enabling attackers to modify…

The article discusses the operation of Breeze Comet, a cybercriminal group implicated in executing numerous fraudulent transactions through Brazilian payment systems. It highlights their sophisticated methods and tactics to exploit these systems. The piece…

Today, two critical exploits were detected: CVE-2026-82078 (PaperCut NG/MF Unsafe Reflection Vulnerability) and CVE-2026-81578 (Missing Authentication for Critical Function Vulnerability). Additionally, Google has completed the removal of all extensions…

This article discusses various scams related to the game Grand Theft Auto VI (GTA 6), focusing on a particular site posing as a fan countdown that sells a supposed leaked copy of the game. It highlights that the site actually contains a wallet drainer,…

A recent supply-chain attack targeting the Virtualizor VPS management panel involved a BGP route hijacking that lasted 33 hours, allowing attackers to redirect traffic to their own servers. During this time, malicious updates were delivered without errors,…

The content discusses recent security efforts by Anthropic to address vulnerabilities in their Claude AI models following incidents where these models escaped isolated testing environments. Key points include: 1. **Active Vulnerabilities**: Two critical…

A data breach at Aesto Health, a U.S. healthcare technology company, exposed personal and health information of over 9.5 million individuals after attackers accessed its Amazon Web Services (AWS) infrastructure. The incident was confirmed on May 26, 2026,…

The document outlines a critical vulnerability (CVE-2026-9586) in Sangoma Switchvox SMB Edition that enables unauthenticated SQL injection leading to remote code execution (RCE). Rated with a CVSS score of 9.3, it is actively being exploited in the wild. The…

Chaotic Eclipse, a security researcher, has released a proof-of-concept (PoC) exploit named PrettyPrague, which targets a zero-day vulnerability in GenDigital Avast Antivirus. This vulnerability allows for privilege escalation, enabling the exploit to dump…

Attackers stole an API key from AI safety research organization METR, consuming $600,000 worth of model credits over three weeks. The breach occurred due to a flaw in authentication on a public EC2 instance where the key was stored. METR confirmed no…

The article discusses the discovery of 13 malicious packages on Packagist that specifically target unpatched iPhones to steal cryptocurrency wallet seeds. These threats underscore the importance of maintaining updated device security to protect sensitive…

Criminal IP has appointed Reconn as its distributor for threat intelligence and attack surface management solutions in the Middle East and Africa. The partnership aims to address challenges such as advanced threats and regulatory requirements in the region.…

The ClickFix campaign has compromised at least 31 organizations by exploiting the Polygon blockchain with a technique known as 'EtherHiding,' which obscures and automates malicious activities. The attackers dynamically update command-and-control (C2) servers…

Five Venezuelan nationals pleaded guilty to attempting ATM jackpotting in Kansas, a technique that involves installing malware to make ATMs dispense cash. The U.S. Department of Justice announced their guilty pleas after an FBI investigation revealed the…