CYBER ATTACK

Microsoft Word Zero-Day Vulnerability Allows Attackers to Bypass Security Features

Microsoft Word Zero-Day Vulnerability Allows Attackers to Bypass Security Features

CYBER ATTACKZerowl

On February 10, 2026, Microsoft revealed a significant zero-day vulnerability in Word, serving as a warning to Office users This article explores office.

Microsoft Investigates Teams Assignment Errors After Failed Service Update

Microsoft Investigates Teams Assignment Errors After Failed Service Update

CYBER ATTACKZerowl

Microsoft Looks Into Issues with Teams Assignments Widespread assignment management issues with Microsoft Teams have prompted the company to launch an.

Coinbase Cartel Targets High-Value Sectors with Data-Theft-First Extortion Strategy

Coinbase Cartel Targets High-Value Sectors with Data-Theft-First Extortion Strategy

CYBER ATTACKZerowl

With new threat actors using unusual strategies, the ransomware landscape is constantly changing This article explores ransom coinbase cartel. . When.

Coinbase Cartel Prioritizes Data Theft in Targeted Extortion Campaign

Coinbase Cartel Prioritizes Data Theft in Targeted Extortion Campaign

CYBER ATTACKZerowl

In September 2025, Coinbase Cartel, a ransomware group, made its debut and claimed 14 victims in that month alone This article explores coinbase cartel.

CISA Adds Six Microsoft 0-Day Vulnerabilities to KEV Catalog Following Active Exploitation

CISA Adds Six Microsoft 0-Day Vulnerabilities to KEV Catalog Following Active Exploitation

CYBER ATTACKZerowl

0-Day Vulnerabilities in Microsoft Six zero-day vulnerabilities that impact Microsoft products have been added to the U.S This article explores.

Double-extortion attacks using exposed RDP are exploited by Cephalus Ransomware.

Double-extortion attacks using exposed RDP are exploited by Cephalus Ransomware.

CYBER ATTACKZerowl

Since the middle of 2025, Cephalus ransomware has become a serious threat, using weak Remote Desktop Protocol (RDP) access to target Windows systems This.

Windows Shell Zero-Day Vulnerability Allows Attackers to Bypass Authentication

Windows Shell Zero-Day Vulnerability Allows Attackers to Bypass Authentication

CYBER ATTACKZerowl

A zero-day vulnerability in Windows Shell, identified as CVE-2026-21510, prompted Microsoft to issue an urgent patch on February 10, 2026 This article.

Windows Shell Security Feature 0-Day Vulnerability Let Attackers Bypass Authentication

Windows Shell Security Feature 0-Day Vulnerability Let Attackers Bypass Authentication

CYBER ATTACKZerowl

0-Day Vulnerability in the Windows Shell Security Feature In order to fix a serious zero-day vulnerability in Windows Shell that is presently being.

Windows Remote Access Connection Manager Zero-Day Enables DoS Attacks

Windows Remote Access Connection Manager Zero-Day Enables DoS Attacks

CYBER ATTACKZerowl

On February 10, 2026, Microsoft released urgent fixes for a zero-day vulnerability in the Windows Remote Access Connection Manager (RasMan) service This.

Ivanti Endpoint Manager Vulnerability Allows Remote Attackers to Leak Arbitrary Data

Ivanti Endpoint Manager Vulnerability Allows Remote Attackers to Leak Arbitrary Data

CYBER ATTACKZerowl

For its Endpoint Manager (EPM) software, Ivanti has released a critical security patch in a hurry, addressing two serious flaws that could allow hackers.

GitLab Patches Multiple Vulnerabilities Enabling DoS and Cross-Site Scripting Attacks

GitLab Patches Multiple Vulnerabilities Enabling DoS and Cross-Site Scripting Attacks

CYBER ATTACKZerowl

GitLab, a well-known code collaboration platform, recently released critical security updates for its Enterprise Edition (EE) and Community Edition (CE).

APT36 Uses New Disruptive Tools to Target Linux Systems

APT36 Uses New Disruptive Tools to Target Linux Systems

CYBER ATTACKZerowl

State-sponsored "espionage ecosystems" are posing an increasing threat to critical infrastructure around the world This article explores access trojans.

Windows Remote Desktop Services 0-Day Vulnerability Exploited in the Wild to Escalate Privileges

Windows Remote Desktop Services 0-Day Vulnerability Exploited in the Wild to Escalate Privileges

CYBER ATTACKZerowl

A zero-day vulnerability in Windows Remote Desktop Services A zero-day elevation of privilege vulnerability in Windows Remote Desktop Services (RDS) that.

Windows Notepad Vulnerability Allows Attackers to Execute Malicious Code Remotely

Windows Notepad Vulnerability Allows Attackers to Execute Malicious Code Remotely

CYBER ATTACKZerowl

RCE Vulnerability in Windows Notepad Microsoft has fixed CVE-2026-20841, a critical remote code execution (RCE) vulnerability in the Windows Notepad.

TeamPCP Turns Cloud Misconfigurations Into Scalable Cybercrime Engine

TeamPCP Turns Cloud Misconfigurations Into Scalable Cybercrime Engine

CYBER ATTACKZerowl

In a massive cloud exploitation campaign, a threat group called TeamPCP—also known as PCPcat, ShellForce, and DeadCatx3—has transformed misconfigured.

GitLab Patches Multiple Vulnerabilities That Enables DoS and Cross-site Scripting Attacks

GitLab Patches Multiple Vulnerabilities That Enables DoS and Cross-site Scripting Attacks

CYBER ATTACKZerowl

Vulnerabilities are fixed by GitLab This article explores vulnerability identified cve. . To fix several high-severity vulnerabilities, a critical.

FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

CYBER ATTACKZerowl

A shocking security alert regarding a nasty bug in its FortiOS firewall software was just released by Fortinet This article explores bug fortios firewall.

Malicious Bing Ads Spread False Azure Support Scams

Malicious Bing Ads Spread False Azure Support Scams

CYBER ATTACKZerowl

Malicious Bing search ads have been used in a recent tech support scam campaign to trick American users into visiting phony Microsoft Azure support pages.

Microsoft February 2026 Patch Tuesday Fixes 54 Vulnerabilities, Including 6 Zero-Days

Microsoft February 2026 Patch Tuesday Fixes 54 Vulnerabilities, Including 6 Zero-Days

CYBER ATTACKZerowl

With great urgency, Microsoft released its February 2026 Patch Tuesday, which addressed 54 security vulnerabilities in Windows, Office, Exchange, Azure.

VoidLink Linux C2 Showcases LLM-Generated Malware Capabilities

VoidLink Linux C2 Showcases LLM-Generated Malware Capabilities

CYBER ATTACKZerowl

A robust Linux command-and-control (C2) framework called VoidLink creates implant binaries for enterprise and cloud attacks. The implant, known as.

Threat hunting is essential to SOC maturity, but it frequently overlooks actual attacks.

Threat hunting is essential to SOC maturity, but it frequently overlooks actual attacks.

CYBER ATTACKZerowl

Threat Hunting Is Essential for SOC Sandbox-derived threat intelligence is becoming more and more popular among high-performing SOC teams as a way to make.

Attackers Can Get Around LDAP Authentication with the FortiOS Authentication Bypass Vulnerability

Attackers Can Get Around LDAP Authentication with the FortiOS Authentication Bypass Vulnerability

CYBER ATTACKZerowl

Vulnerability in FortiOS Authentication Bypass A high-severity authentication bypass vulnerability in FortiOS, identified by Fortinet as CVE-2026-22153.

North American users are affected by a Microsoft 365 Admin Center outage.

North American users are affected by a Microsoft 365 Admin Center outage.

CYBER ATTACKZerowl

Discover how Microsoft 365 Admin Center Outage According to the company's service health dashboard, Microsoft 365 administrators in North America are.

Top 10 Best DDOS Protection Solutions in 2026

Top 10 Best DDOS Protection Solutions in 2026

CYBER ATTACKZerowl

DDoS defense strategies Hyper-connectivity and, regrettably, hyper-volumetric cyber threats characterize the digital environment of 2026 This article.

Threat Actors Publish Malicious dYdX Packages to npm and PyPI Repositories

Threat Actors Publish Malicious dYdX Packages to npm and PyPI Repositories

CYBER ATTACKZerowl

Threat actors released malicious versions of dYdX client packages to npm and PyPI ecosystems as part of a supply chain attack, according to cybersecurity.

SAP Security Patch Day – Critical SAP CRM and SAP S/4HANA Code Injection Vulnerabilities Fixed

SAP Security Patch Day – Critical SAP CRM and SAP S/4HANA Code Injection Vulnerabilities Fixed

CYBER ATTACKZerowl

SAP Security Patch Day Fixes for SAP CRM and SAP S/4HANA SAP's February 2026 Security Patch Day brought fixes that SAP encourages users to prioritize in.

Prometei Botnet Targets Windows Servers to Gain Remote Access and Deploy Malware

Prometei Botnet Targets Windows Servers to Gain Remote Access and Deploy Malware

CYBER ATTACKZerowl

Prometei, a Russian-affiliated botnet that has been active since 2016, was discovered by eSentire's Threat Response Unit (TRU) attacking a Windows server.

Ivanti Endpoint Manager Vulnerability Lets Remote Attacker Leak Arbitrary Data

Ivanti Endpoint Manager Vulnerability Lets Remote Attacker Leak Arbitrary Data

CYBER ATTACKZerowl

Multiple vulnerabilities in Ivanti Endpoint Manager For its Endpoint Manager (EPM) platform, Ivanti has published important security updates that fix two.

Top 5 this week

Page 30 of 44