CYBER ATTACK

Hackers Compromised 7,500+ Magento Websites to Upload Hidden Malicious Files and Steal Data

Hackers Compromised 7,500+ Magento Websites to Upload Hidden Malicious Files and Steal Data

CYBER ATTACKZerowl

Since late February 2026, a large-scale cyberattack has affected more than 7,500 Magento-powered e-commerce sites This article explores attack magento.

Claude Cowork Desktops Anthropic Launches Projects Feature

Claude Cowork Desktops Anthropic Launches Projects Feature

CYBER ATTACKZerowl

Anthropic is adding a new Projects feature to Claude Cowork Desktop This article explores cowork desktop projects. . This feature will help you keep.

Ransomware Actors Expand EDR Killer Tactics Beyond Vulnerable Drivers

Ransomware Actors Expand EDR Killer Tactics Beyond Vulnerable Drivers

CYBER ATTACKZerowl

Ransomware attackers have come up with new ways to get around endpoint security that go beyond just taking advantage of weak drivers This article explores.

Perseus Android Malware Steals User Notes and Enables Full Device Takeover

Perseus Android Malware Steals User Notes and Enables Full Device Takeover

CYBER ATTACKZerowl

Perseus is a new Android banking trojan that has been found in the wild This article explores perseus new android. . It is the next step in the ongoing.

Navia Confirms Data Breach Exposing Sensitive Data of 2.7 Million Users

Navia Confirms Data Breach Exposing Sensitive Data of 2.7 Million Users

CYBER ATTACKZerowl

Navia Benefit Solutions has confirmed that a large-scale data breach has affected about 2.7 million people This article explores navia administered.

Navia Confirms Data Breach – 2.7 Million Users Sensitive Data Exposed

Navia Confirms Data Breach – 2.7 Million Users Sensitive Data Exposed

CYBER ATTACKZerowl

Data Breach at Navia A well-known U.S This article explores data breach navia. . benefits administrator that focuses on consumers has revealed a major.

Microsoft Unveils New Teams Optimizations for Windows App on iOS & Android

Microsoft Unveils New Teams Optimizations for Windows App on iOS & Android

CYBER ATTACKZerowl

Microsoft New Teams Optimizes Windows App on iOS and Android Microsoft has officially announced that new improvements to Microsoft Teams are now available.

Google Chrome Update Fixes 26 Security Flaws, Including RCE Vulnerabilities

Google Chrome Update Fixes 26 Security Flaws, Including RCE Vulnerabilities

CYBER ATTACKZerowl

Google has put out a new stable update for Chrome that fixes 26 security holes, including three serious bugs that could let remote code execution (RCE).

FBI, Thai Partners Target Southeast Asia Scam Centers Behind Cyber Fraud on Americans

FBI, Thai Partners Target Southeast Asia Scam Centers Behind Cyber Fraud on Americans

CYBER ATTACKZerowl

Discover how The fraud doesn't usually tell you it's there. It starts with a friendly message on social media, a text that goes to the wrong number and.

Fake Tools Fuel Vibe-Coded Malware Campaign Targeting Unsuspecting Users

Fake Tools Fuel Vibe-Coded Malware Campaign Targeting Unsuspecting Users

CYBER ATTACKZerowl

Discover how A big malware campaign is using fake software downloads to spread crypto miners, info-stealers, remote access tools, and other harmful.

Critical UNISOC T612 Modem Flaw Enables RCE via Cellular Calls

Critical UNISOC T612 Modem Flaw Enables RCE via Cellular Calls

CYBER ATTACKZerowl

Discover how A serious memory corruption bug in UNISOC's T612 modem family lets hackers run code remotely (RCE) on weak Android devices with just a.

Critical Jenkins Vulnerabilities Expose CI/CD Servers to RCE Attacks

Critical Jenkins Vulnerabilities Expose CI/CD Servers to RCE Attacks

CYBER ATTACKZerowl

Jenkins flaws put CI/CD servers at risk A very important security advisory that talks about several very serious security holes in Jenkins core and the.

Cobra DocGuard Hijacked By Speagle Malware For Sensitive Data Theft

Cobra DocGuard Hijacked By Speagle Malware For Sensitive Data Theft

CYBER ATTACKZerowl

Researchers from Symantec and Carbon Black have found a new infostealer called Speagle that is hard to see This article explores speagle hard malware.

CISA says that the Cisco Secure Firewall Management Center 0-Day is being used in ransomware attacks.

CISA says that the Cisco Secure Firewall Management Center 0-Day is being used in ransomware attacks.

CYBER ATTACKZerowl

CISA warns about a 0-day exploit for Cisco Secure Firewall Management Center An urgent warning has been issued about a serious zero-day flaw in Cisco.

Attackers can run code on the Bamboo Data Center and Server because they are vulnerable.

Attackers can run code on the Bamboo Data Center and Server because they are vulnerable.

CYBER ATTACKZerowl

Vulnerability of Bamboo Data Center and Server Bamboo Data Center, a popular business platform for managing software builds and releases, has fixed a.

SILENTCONNECT Uses VBScript, PowerShell and PEB Masquerading to Deploy ScreenConnect

SILENTCONNECT Uses VBScript, PowerShell and PEB Masquerading to Deploy ScreenConnect

CYBER ATTACKZerowl

SILENTCONNECT is a new type of multi-stage malware loader that has been quietly attacking Windows computers since at least March 2025 This article.

Russian APT Exploits Zimbra XSS to Target Ukrainian Government in ‘Operation GhostMail’

Russian APT Exploits Zimbra XSS to Target Ukrainian Government in ‘Operation GhostMail’

CYBER ATTACKZerowl

A hacker linked to the Russian government has targeted a Ukrainian government agency with a cyberattack that takes advantage of a cross-site scripting.

Russian APT Exploits Zimbra XSS In GhostMail Attacks On Ukrainian Government

Russian APT Exploits Zimbra XSS In GhostMail Attacks On Ukrainian Government

CYBER ATTACKZerowl

Seqrite Labs has found a very specific phishing campaign called "Operation GhostMail." The attack took advantage of a Cross-Site Scripting (XSS) flaw in.

Critical Jenkins Vulnerabilities Enable Remote Code Execution on CI/CD Servers

Critical Jenkins Vulnerabilities Enable Remote Code Execution on CI/CD Servers

CYBER ATTACKZerowl

The Jenkins project has sent out a critical security warning about several flaws in its core automation server and the LoadNinja plugin. These flaws make.

Critical Bamboo Data Center Vulnerability Enables Remote Code Execution

Critical Bamboo Data Center Vulnerability Enables Remote Code Execution

CYBER ATTACKZerowl

Atlassian has fixed a serious remote code execution (RCE) flaw in its Bamboo Data Center platform, which is a popular tool for continuous integration and.

CISA Warns of Cisco Firewall 0-Day Exploited in Ransomware Attacks

CISA Warns of Cisco Firewall 0-Day Exploited in Ransomware Attacks

CYBER ATTACKZerowl

CISA has sent out an urgent warning to businesses about a serious zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) and Cisco.

Authorities Disrupt IoT Botnet Infrastructure Behind Record-Breaking 30 Tbps DDoS Attacks

Authorities Disrupt IoT Botnet Infrastructure Behind Record-Breaking 30 Tbps DDoS Attacks

CYBER ATTACKZerowl

Authorities Mess Up IoT Authorities have successfully taken down the command-and-control (C2) networks that run four huge Internet of Things (IoT) botnets.

Aura Confirms Data Breach Impacting 900,000 Consumer Records

Aura Confirms Data Breach Impacting 900,000 Consumer Records

CYBER ATTACKZerowl

Aura, a company that provides digital security, has confirmed that a targeted social engineering attack led to a data breach that affected about 900,000.

Apex is an AI-powered pentester that attacks apps in black-box mode to find weaknesses.

Apex is an AI-powered pentester that attacks apps in black-box mode to find weaknesses.

CYBER ATTACKZerowl

Apex AI Penetration Testing Agent Apex is an AI-powered penetration testing agent that can work on its own and test live apps in black-box mode. It.

Open Directory Leak Reveals Iran-Linked 15-Node Relay Network

Open Directory Leak Reveals Iran-Linked 15-Node Relay Network

CYBER ATTACKZerowl

Threat actors sometimes make mistakes in operational security that put their whole work environment at risk This article explores relay infrastructure.

Malicious ‘Pyronut’ Package Backdoors Telegram Bots With Remote Code Execution

Malicious ‘Pyronut’ Package Backdoors Telegram Bots With Remote Code Execution

CYBER ATTACKZerowl

Discover how The Python Package Index (PyPI) has found a malicious Python package called pyronut that pretends to be the popular pyrogram framework and.

Horabot Banking Trojan Resurfaces in Mexico With Multi-Stage Phishing and Email Worm Tactics

Horabot Banking Trojan Resurfaces in Mexico With Multi-Stage Phishing and Email Worm Tactics

CYBER ATTACKZerowl

Discover how Horabot, a well-known banking trojan, is back in an active campaign that is targeting users all over Mexico. It uses a multi-stage infection.

Claude Vulnerabilities Allow Data Exfiltration and User Redirection to Malicious Sites

Claude Vulnerabilities Allow Data Exfiltration and User Redirection to Malicious Sites

CYBER ATTACKZerowl

Claude Vulnerabilities Steal Private Information and Send Users to Bad Websites Three linked flaws in Claude.ai, Anthropic's popular AI assistant, let.

CISA Tells Businesses to Protect Microsoft Intune After Stryker Breach

CISA Tells Businesses to Protect Microsoft Intune After Stryker Breach

CYBER ATTACKZerowl

The U.S This article explores misuse endpoint management. . Cybersecurity and Infrastructure Security Agency (CISA) has sent out a new warning telling.

WaterPlum Deploys New ‘StoatWaffle’ Malware in VSCode-Based Supply Chain Campaign

WaterPlum Deploys New ‘StoatWaffle’ Malware in VSCode-Based Supply Chain Campaign

CYBER ATTACKZerowl

WaterPlum, a hacking group linked to North Korea, has released a new piece of malware called StoatWaffle This article explores waterplum hacking group.

Top 5 this week

Page 11 of 44