News

Over 2,000 leaked documents from Bauman Moscow State Technical University reveal that the institution's hidden Department No. 4 has been training students to become cyber operators for Russia's GRU (military intelligence). This department, which doesn't…

Today, seven critical exploits have been detected, including vulnerabilities in BerriAI and SonicWall appliances. Meanwhile, a new AI-built malware toolkit called Gryxa has been identified by ReliaQuest. This toolkit exploits legitimate remote monitoring…

A researcher has developed a Proof of Concept (PoC) named FalconFlank, which demonstrates a privilege escalation vulnerability in CrowdStrike Falcon, a key endpoint security platform. This vulnerability could potentially allow attackers enhanced access…

The article details new cybersecurity vulnerabilities identified by CISA, specifically seven recently exploited flaws. These vulnerabilities have allowed attackers to deploy reverse shells and crypto miners, posing significant risks to systems. The piece…

The content highlights two primary topics related to cybersecurity vulnerabilities. First, it notes seven active exploits detected today, detailing various vulnerabilities with their corresponding CVE identifiers, including issues in BerriAI, Kludex, Kestra…

The page outlines critical alerts for 7 active exploits detected today, including vulnerabilities in various software. It highlights incidents like improper authentication and command injection vulnerabilities affecting products from BerriAI, Kludex, Kestra…

A critical security alert highlights seven newly identified vulnerabilities actively exploited by threat actors. The vulnerabilities, categorized under CISA's Known Exploited Vulnerabilities (KEV), include high-risk flaws such as improper authentication and…

Seven active exploits have been detected today, including vulnerabilities in BerriAI, Kludex, Kestra OSS, JFrog Artifactory, Sangoma Switchvox, and SonicWall SMA1000. Specifically, the Cisco Nexus 9000 vulnerability (CVE-2026-20212) allows unauthenticated…

Today, seven critical exploits have been detected, highlighting various vulnerabilities in software products including improper authentication and SQL injection issues across notable platforms like BerriAI, JFrog Artifactory, and SonicWall appliances.…

A Russian national, Searzhudin Tamirlanovich Aktulaev, has been indicted for distributing malware targeting freelance workers, leading to the compromise of approximately 80,000 accounts. Between June 2016 and November 2017, he allegedly used 255 fraudulent…

Seven active cybersecurity exploits were detected today, including several vulnerabilities with critical and high security implications. Notably, the Apple Neural Engine (ANE) kernel vulnerability (CVE-2026-43748) has a CVSS score of 9.8, indicating its…

The content discusses two main topics: critical vulnerabilities identified today and a recent achievement in cryptography by Claude Fable 5.1. It presents seven active exploits with their CVE identifiers, including issues in BerriAI, Kludex, Kestra OSS,…

The diary by Frank Igbokwe discusses the Honeypot-Omaha DShield Sensor, a decoy system designed to attract threat actors. It highlights the use of a tool called 'cowrie' that captures malicious activities on exposed ports. Igbokwe outlines the automation of…

The content discusses the ISC Stormcast for Thursday, September 3rd, 2026, highlighting the on-duty handler, Guy Bruneau, and indicating a green threat level. It provides links to learn more about classes taught by Dr. Johannes Ullrich and invites…

The page discusses critical vulnerabilities identified in HPE Networking's AOS-CX switch software. Key points include: 1. **Alert Summary**: 7 active exploits were detected today, including several critical vulnerabilities like CVE-2026-73749 (CVSS 9.8)…

The report provides updates on critical security vulnerabilities affecting Jenkins, particularly noting seven active exploits detected. Eight significant CVEs including a high-risk remote code execution vulnerability (CVE-2026-84645) were highlighted, with…

Microsoft Threat Intelligence has identified a human-operated intrusion campaign exploiting Microsoft Teams to impersonate IT support. Attackers socially engineer users to enable remote access via legitimate tools, followed by installing malicious scripts…

The page requested is not available, leading to a 'Page Not Found' message. Although the specific content is absent, it indicates that the rest of the Cloudflare blog is operational. The page provides navigation options including categories and language…

OpenAI's Astra model has achieved a 'Critical' cybersecurity risk classification, enabling it to autonomously identify zero-day vulnerabilities and build exploits without human intervention. This positions Astra as OpenAI's highest-risk cybersecurity model.…

Broadcom has introduced the TrueSource project during VMware Explore 2026, providing verified and traceable open-source software builds with commercial support. The initiative aims to combat supply chain attacks by delivering secure, patched packages based…

New research indicates that the anticipated surge in AI-related vulnerabilities may be manageable for enterprise security teams. A report by software supply chain security firm Echo revealed that while AI accelerates vulnerability discovery, enterprises can…

A recent incident revealed that over 153 million driver’s licenses, including the author's, were available for sale on a dark web site known as Nexus. This site provided high-resolution scans of IDs, including images in infrared and ultraviolet spectra,…

The article discusses insights from Brett Johnson, a former cybercriminal, regarding the role of AI in cybercrime. Johnson emphasizes that AI provides cybercriminals with a significant advantage by speeding up the research and execution phases of attacks.…

Max Brin is developing an innovative product named OpenLeash, which acts as a controlling layer for AI agents to prevent unauthorized or risky actions. OpenLeash monitors agents' actions and requests user confirmation for uncertain actions, enhancing…

Google, Anthropic, and OpenAI have introduced new AI cybersecurity models aimed at enhancing security measures within their platforms. These advancements include safeguards against AI-powered attacks, alongside new access programs designed to improve user…

The 'Spring Ring' operation is a coordinated campaign targeting at least 150 Microsoft Teams users through voice phishing (vishing) attacks. Conducted between January and April, it exploits trusted collaboration platforms to install remote monitoring tools…

The article discusses the dangers posed by fake software installers that disable Windows Update and weaken Microsoft Defender, highlighting the risks of social engineering in cybersecurity. It details how these malicious tools can create significant…

The article discusses the evolving nature of tech support scams, where criminals impersonate trusted technology companies to deceive individuals into sharing personal information or paying for unnecessary services. Scammers have shifted from traditional…

The UK Cyber Security and Resilience Bill (CSRB) is nearing Royal Assent, aimed at enhancing the security of the nation's critical infrastructure, particularly in response to rising supply chain threats. The bill, introduced to Parliament in November 2025,…

A critical vulnerability in Elementor Pro, tracked as CVE-2026-32475, is being actively exploited, posing severe risks to over six million WordPress websites utilizing the plugin. The vulnerability, which allows arbitrary file uploads, carries a CVSS score…

A Russian man, Searzhudin Tamirlanovich Aktulaev, has been extradited to the U.S. for his alleged role in a malware distribution campaign targeting around 80,000 users of a freelance employment platform. Arrested in Cyprus in May 2025 and extradited in…

A recent security flaw affected Dropbox users due to a vulnerability in the Lenovo ID registration process, allowing unauthorized access to Dropbox accounts just by using a victim's email address. Attackers exploited an email-verification defect in Lenovo…

The Sality botnet, operational since 2003, was recently disrupted in a coordinated effort by law enforcement and cybersecurity firms on August 31, 2026. This notorious peer-to-peer botnet had infected over 15,000 machines and was responsible for various…

IDScan, a major identity verification provider, suffered a severe data breach where hackers are selling 153 million stolen identity documents, including driver’s licenses, ID cards, and passports, primarily from users in the U.S. and Canada. The hacker,…

A significant supply chain attack recently targeted the Virtualizor server management panel, where hackers exploited Border Gateway Protocol (BGP) routing to redirect legitimate updates to their own servers, allowing them to install backdoors and gain…