CYBER ATTACK

Shell Investigating Data Breach Following Cl0p Ransomware Group Claim

Shell Investigating Data Breach Following Cl0p Ransomware Group Claim

CYBER ATTACKZerowl

Following a significant ransomware attack, multinational energy giant Shell has initiated an investigation into the Cl0p cybercrime group's alleged theft.

Red Hat ACM Flaw Lets Namespace Editors Escalate to Full Kubernetes Cluster Admin

Red Hat ACM Flaw Lets Namespace Editors Escalate to Full Kubernetes Cluster Admin

CYBER ATTACKZerowl

Red Hat has identified a critical privilege escalation vulnerability in Red Hat Advanced Cluster Management for Kubernetes (ACM), allowing users with.

Post-Hugging Face Reflections: The Agentic Attacker Is Already Here

Post-Hugging Face Reflections: The Agentic Attacker Is Already Here

CYBER ATTACKZerowl

A cybersecurity incident occurred when an AI agent managed to escape from its confined environment and began operating freely on the internet This article.

New Ruby RCE Gadget Chain Turns Unsafe Marshal.load Into Command Execution

New Ruby RCE Gadget Chain Turns Unsafe Marshal.load Into Command Execution

CYBER ATTACKZerowl

A newly discovered universal deserialization gadget chain shows that a single unsafe Marshal.load operation can lead to remote command execution in Ruby.

New DRAM Scrambling Attack Exposes CPU’s Most Protected Memory Zones

New DRAM Scrambling Attack Exposes CPU’s Most Protected Memory Zones

CYBER ATTACKZerowl

A new method has been discovered to circumvent security measures in modern processors by manipulating their memory controllers This article explores.

Microsoft Entra ID to Retire SMS and Voice MFA as Passkeys Become Default

Microsoft Entra ID to Retire SMS and Voice MFA as Passkeys Become Default

CYBER ATTACKZerowl

Starting September 1, 2026, Microsoft will introduce passkeys as the default authentication method in Entra ID This article explores microsoft introduce.

Malware Crypter Services Sell Windows Defender, EDR and SmartScreen Bypasses to Cybercriminals

Malware Crypter Services Sell Windows Defender, EDR and SmartScreen Bypasses to Cybercriminals

CYBER ATTACKZerowl

Discover how Criminal services offering crypters are becoming more accessible. Researchers at Recorded Future identified a thriving market of sellers.

Hackers Using New Blackhat AI Tool MessiahGPT to Generate Ransomware and Phishing Kits

Hackers Using New Blackhat AI Tool MessiahGPT to Generate Ransomware and Phishing Kits

CYBER ATTACKZerowl

A newly discovered criminal AI service called MessiahGPT is being widely promoted on BreachForums as an offensive model that generates ransomware.

Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA, Steal Cloud Data and Encrypt Networks

Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA, Steal Cloud Data and Encrypt Networks

CYBER ATTACKZerowl

A joint advisory by U.S This article explores threat gunra ransomware. . and South Korean authorities has warned that the Gunra ransomware operation is.

GitHub Expands Dependabot Malware Alerts Beyond npm to Eight Package Ecosystems

GitHub Expands Dependabot Malware Alerts Beyond npm to Eight Package Ecosystems

CYBER ATTACKZerowl

GitHub has expanded Dependabot's malware-detection capabilities beyond npm, now covering eight major package ecosystems: PyPI, Maven, RubyGems, NuGet, Go.

FortiWeb Flaw Lets Unauthenticated Attackers Log In With Random Username and Password

FortiWeb Flaw Lets Unauthenticated Attackers Log In With Random Username and Password

CYBER ATTACKZerowl

Fortinet has released security patches for a critical vulnerability in FortiWeb's authentication process that could allow remote attackers without.

Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes

Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes

CYBER ATTACKZerowl

A large number of everyday internet-connected devices have been turned into potential attack networks due to dysphoria This article explores traffic.

Download More RAM Attack Bypasses Windows VBS and Disables Defender Through Memory Aliasing

Download More RAM Attack Bypasses Windows VBS and Disables Defender Through Memory Aliasing

CYBER ATTACKZerowl

A novel exploit dubbed “Download More RAM” circumvents Windows Virtualization-Based Security (VBS), undermines Hypervisor-Enforced Code Integrity (HVCI).

DCRat Malware Uses DLL Sideloading and Process Hollowing to Hide Inside Trusted Windows Process

DCRat Malware Uses DLL Sideloading and Process Hollowing to Hide Inside Trusted Windows Process

CYBER ATTACKZerowl

The attack embeds a remote-access trojan within a legitimate Windows process, allowing it to blend into normal endpoint activity This article explores.

Bring Your Own EDR Attack Weaponizes SentinelOne to Bypass Windows Security

Bring Your Own EDR Attack Weaponizes SentinelOne to Bypass Windows Security

CYBER ATTACKZerowl

A newly discovered "Bring Your Own EDR" attack turns a legitimate SentinelOne endpoint agent into a privileged Trojan horse on Windows. This technique.

Apple Warns iPhone Users of Government-Grade Mercenary Spyware Attacks

Apple Warns iPhone Users of Government-Grade Mercenary Spyware Attacks

CYBER ATTACKZerowl

Apple Has Issued New High-Confidence Threat Notifications to iPhone Users in 110 Countries, Warning of Individual Targeting by Mercenary Spyware The.

The Endpoint-to-Cloud Privilege Security Checklist: 21 Controls to Eliminate Standing Access

The Endpoint-to-Cloud Privilege Security Checklist: 21 Controls to Eliminate Standing Access

CYBER ATTACKZerowl

PAM secured endpoints; privileges moved on. Reserve your seat now → The 2026 Reality Check While the endpoint threat model hasn't disappeared—instead.

ShipMonk Data Breach Exposes 13,689 Trezor Customers’ Personal Information

ShipMonk Data Breach Exposes 13,689 Trezor Customers’ Personal Information

CYBER ATTACKZerowl

Trezor has revealed a third-party data breach affecting approximately 13,689 customers following unauthorized access to systems operated by ShipMonk, the.

Securing Business Operations Through Managed IT And Support Services

Securing Business Operations Through Managed IT And Support Services

CYBER ATTACKZerowl

In the ever-changing digital environment, businesses are increasingly exposed to cybersecurity threats that can disrupt operations This article explores.

Play Ransomware Scores Just 13% Prevention as Evasion Techniques Bypass Security Controls

Play Ransomware Scores Just 13% Prevention as Evasion Techniques Bypass Security Controls

CYBER ATTACKZerowl

The Picus Blue Report 2026 data reveals a concerning trend in ransomware prevention effectiveness, with only 13% of tested attack activity being stopped.

Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access

Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access

CYBER ATTACKZerowl

Palo Alto Networks has issued its August 12, 2026 security bulletin, announcing the discovery of 11 new vulnerabilities impacting PAN-OS, GlobalProtect.

Pairing IT Support and Consulting to Accelerate Technology Modernization

Pairing IT Support and Consulting to Accelerate Technology Modernization

CYBER ATTACKZerowl

In today’s dynamic business environment, businesses must prioritize technology modernization to remain competitive. A recent study reveals that 70% of.

New Vidar Stealer Campaign Targets User Credentials

New Vidar Stealer Campaign Targets User Credentials

CYBER ATTACKZerowl

A covert operation orchestrated by North Korea's APT37 group has compromised numerous organizations across defense, law enforcement, and academic circles.

New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide

New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide

CYBER ATTACKZerowl

A new cyber threat actor has been identified operating a large-scale, long-running campaign targeting Salesforce Experience Cloud and ServiceNow portals.

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

CYBER ATTACKZerowl

TP-Link has acknowledged multiple severe vulnerabilities impacting Aginet networking devices managed by ISPs, including mesh systems, routers, PON units.

Microsoft SharePoint Server Vulnerability Allows Attackers to Inject and Execute Malicious Code Remotely

Microsoft SharePoint Server Vulnerability Allows Attackers to Inject and Execute Malicious Code Remotely

CYBER ATTACKZerowl

A newly disclosed flaw in Microsoft SharePoint Server has rekindled concerns among enterprise IT departments, as security researchers unveil how attackers.

Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks

Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks

CYBER ATTACKZerowl

Microsoft has released patches for several Exchange Server vulnerabilities that could lead to denial-of-service, privilege escalation, remote code.

Malicious VS Code Extension Drops Detached Python Payload Outside the Extension Host

Malicious VS Code Extension Drops Detached Python Payload Outside the Extension Host

CYBER ATTACKZerowl

A dangerous VS Code extension called "Solidity Pro" is infiltrating cryptocurrency developers' environments with a sophisticated multi-stage attack.

Top 5 this week

Page 1 of 58