CYBER ATTACK

A newly discovered vulnerability in Microsoft SharePoint Server has raised significant concerns among enterprise security defenders following researchers’.

Microsoft has released security updates for August 2026, addressing 398 CVEs across Windows, Office, SharePoint Server, Azure services, .NET, PowerShell.

Discover how Microsoft has released its August 2026 Patch Tuesday security updates, addressing over 394 vulnerabilities across various Microsoft products.

Microsoft has identified a new remote code execution vulnerability within Outlook, assigned as CVE-2026-70329 This article explores execution.

Microsoft has identified a high-severity remote code execution flaw in Outlook, enabling threat actors to run malicious code on targeted devices by.

A compromised LiteLLM component has raised concerns about how trusted AI software can become an entry point into networks. LiteLLM’s build pipeline.

A new wave of the DPRK-linked Lazarus group’s Operation Dream Job is revealing that their campaign now exploits an unknown Windows kernel vulnerability.

Hackers leverage the Polygon blockchain to obscure parts of an ErrTraffic malware operation This article explores hackers leverage polygon. . Indicators.

An active cyberattack campaign targeting internet-accessible VMware vCenter instances. Researchers discovered evidence suggesting advanced persistent.

Discover how The Gunra ransomware gang employs a methodical strategy that aims to thwart all potential recovery routes before implementing the malware. In.

Discover how A joint cybersecurity advisory from the FBI, CISA, Department of Defense Cyber Crime Center, NSA, U.S. Gunra first surfaced in April 2025 as.

Google has released an updated version of its Chrome browser for desktop platforms, addressing five high-severity security flaws that affect core.

Google Chrome has significantly reduced abusive notifications by over 7 billion daily across Android during Q1 of 2026, per a recent technical overview.

A new phishing campaign uses a fake "New Audio MSG" email to lure recipients into a Google-themed sign-in page, tricking them into sharing their.

A vast network of fake Chrome VPN extensions has been discovered, masquerading as reputable brands like ProtonVPN and NordVPN. The Threat Research Team.

Cybercriminals are using a fake CCleaner installer to infect Windows users with GhostDesk, a malicious Chrome extension designed to spy on browsing.

Windows users seeking a familiar cleanup tool are often lured to deceptive counterfeit pages, where they unwittingly download GhostDesk—a malicious Chrome.

A Delta Air Lines flight carrying passengers home from this year’s largest hacking conference became the center of a rapidly escalating cybersecurity.

On Monday, Delta Air Lines Flight 591 carrying passengers from the world's largest hacking conference became the focal point of a rapidly escalating.

First detected in July 2025, this group has already compiled a list of over 80 organizations on its leak site known as the DeadLock blog This article.

Dark web markets persist despite forum closures, arrests, and disruption efforts. Criminal organizations swiftly adapt by utilizing new platforms, replica.

WordPress 7.0.4 has been released, addressing a critical security patch that closes a remote code execution vulnerability impacting sites utilizing the.

Broadcom VMware vCenter administrators are grappling with an intrusion campaign targeting CVE-2026-59310, a severe directory-traversal vulnerability in.

Adobe has released an urgent security update for Adobe Commerce and Magento Open Source, addressing several vulnerabilities that could enable attackers to.

A newly disclosed Docker vulnerability, tracked as CVE-2026-17106 and nicknamed “CopyEscape,” allows malicious containers to overwrite files on the host.

A newly disclosed vulnerability, tracked as CVE-2026-17106, enables malicious containers to escape their designated hosts via `docker cp`, overwriting.

Security researchers have discovered CNCMachineRMS, a 1.14 MB x64 remote access trojan (RAT) that is part of a BabaDeda-based infection chain. The final.

Cisco has issued a warning about multiple vulnerabilities in ClamAV that could disrupt file scans on affected Cisco Secure Endpoint Connector.

Security teams managing Cisco edge infrastructure must prioritize patching due to a high-priority deadline following Cisco's confirmation of active.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that two SonicWall SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are.