CYBER ATTACK

A critical SQL injection flaw in Metabase, identified as CVE-2026-72898, can enable unauthenticated remote attackers to compromise vulnerable instances.

A newly discovered version of the Kimwolf botnet has introduced sophisticated techniques to evade detection by mimicking legitimate Chrome browsing.

China-linked cybercriminals have launched what experts call a groundbreaking fully autonomous cyberattack on a foreign government, using open-source.

CAV3RN is a modular espionage framework that becomes harder to detect on networks This article explores listed cav3rn associated. . Its latest.

Project CAV3RN has expanded its cyberespionage toolkit with a new command-and-control (C2) system that conceals traffic through Google Apps Script This.

SpecterOps has released Blacklight, an open-source toolkit designed to identify and detect local artifacts from AI coding agents such as Codex, Claude.

Discover how Armored Likho, also known as Eagle Werewolf, has initiated a new cyberespionage campaign targeting individuals and organizations in Russia.

Anthropic plans to introduce invisible watermarks and metadata for content created by Claude AI, following its adherence to the European Union's AI Act’s.

Hundreds of advertised free VPN or proxy tools have been linked to a significant traffic redirection operation This article explores proxy tools linked.

A recent study reveals that 548 internet-connected building automation devices near U.S This article explores bacnet controllers niagara. . These affected.

Stolen login credentials are so prevalent that they can be bought for almost nothing on the black market This article explores logged authentication.

A new Android fraud operation reveals how quickly a convincing phone call can lead to financial loss. Combining SpyNote, a remote-control tool, with.

Global malware activity surged significantly over the past week, with remote access trojans (RATs), information stealers, and loaders experiencing notable.

Red Hat has identified and disclosed a significant privilege escalation flaw, labeled CVE-2026-10090, impacting the Application Subscription controller.

Discover how Cybercriminals are leveraging phishing emails to infiltrate Microsoft 365 accounts and search for payroll-related files. Ref id: [random.

A new "Pass-the-Passkey" family of attack techniques showcases how systemic implementation flaws in WebAuthn can compromise passkey security, even when.

OpenAI has expanded its Daybreak program to provide more extensive access to frontier AI models for vetted cybersecurity defenders This article explores.

A novel "Ghostjacking" attack technique has been identified, enabling attackers to manipulate and control AI-driven coding agents via subtle manipulation.

Security researchers have discovered a new modular remote access trojan called Abyssos, an advanced C++ malware family that grants attackers extensive.

Cisco has revealed multiple high-severity vulnerabilities in ClamAV that could disrupt antivirus scans and cause denial-of-service conditions This article.

Mozilla has rotated and revoked an unauthorized GPG key used in Firefox and Thunderbird release artifacts after unencrypted copies of the previous key.

A supply chain breach involving LiteLLM underscores how a fleeting malicious package can lead to long-term vulnerabilities across cloud environments.

Kimsuky has been spotted combining polished AI-generated documents with traditional phishing techniques to spread AsyncRAT, a remote-access trojan This.

Physical attackers can exploit vulnerabilities in HP ThinPro’s TPM-backed disk encryption system by modifying unencrypted boot files, enabling extraction.

Horizon3 Invests $20 Million in Partner Ecosystem Expansion, Focusing on Proactive Security Services Modern cybersecurity operations are under increasing.

Attackers are probing VMware vCenter after critical vulnerabilities were revealed, with DefusedCyber’s honeypots noting heightened vCenter fingerprinting.

A malicious Chrome extension posing as GoogleTranslate enables threat actors to steal sensitive information, live-stream web sessions, and remotely.

The attack combines ClickFix social engineering, blockchain-based EtherHiding, and dynamic infrastructure delivery to make detection and takedown more.

SUSE has addressed a critical privilege escalation vulnerability within Rancher that could enable a low-privileged authenticated user to gain.

A newly reported set of 23 vulnerabilities has been identified in Copeland’s XWEB Pro commercial refrigeration controller lineup, including an.