CYBER ATTACK

ZerOwl — Find Vulnerabilities Before Hackers Do
Microsoft VS Code Extension with 11M Downloads Expose Developers to One-Click XSS Attacks

Microsoft VS Code Extension with 11M Downloads Expose Developers to One-Click XSS Attacks

CYBER ATTACKZerowl

Downloads for Microsoft VS Code Extension 11M A serious flaw in Microsoft's widely used Visual Studio Code (VS Code) Live Preview extension, which has.

Cybercriminals Exploit Atlassian Cloud For Large-Scale Spam Campaigns Targeting Investors

Cybercriminals Exploit Atlassian Cloud For Large-Scale Spam Campaigns Targeting Investors

CYBER ATTACKZerowl

Cybercriminals have launched extensive spam campaigns aimed at government agencies and investors by taking advantage of Atlassian Jira Cloud. From late.

ClickFix Social Engineering Fuels Matanbuchus 3.0 AstarionRAT Attack

ClickFix Social Engineering Fuels Matanbuchus 3.0 AstarionRAT Attack

CYBER ATTACKZerowl

Cybersecurity researchers discovered a complex attack chain in which the attackers delivered Matanbuchus 3.0 malware via ClickFix social engineering.

CISA Adds Actively Exploited Windows ActiveX RCE Flaw to KEV Catalog

CISA Adds Actively Exploited Windows ActiveX RCE Flaw to KEV Catalog

CYBER ATTACKZerowl

A critical remote code execution (RCE) vulnerability in Microsoft Windows Video ActiveX Control has been added to the U.S This article explores exploits.

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

New Malware Campaign ‘CRESCENTHARVEST’ Exploits Iran Protest Sentiment to Deploy Information-Stealing RAT

CYBER ATTACKZerowl

A highly skilled new malware campaign called "CRESCENTHARVEST" has emerged, deliberately taking advantage of Iran's geopolitical instability to target.

Matanbuchus 3.0 Returns with ClickFix Social Engineering and Silent MSI Installations to Deploy AstarionRAT

Matanbuchus 3.0 Returns with ClickFix Social Engineering and Silent MSI Installations to Deploy AstarionRAT

CYBER ATTACKZerowl

After a nearly year-long break, the premium malware-as-a-service loader Matanbuchus reappeared in February 2026 This article explores premium malware.

Malicious Triton App Fork Emerges On GitHub, Posing Threat To Cybersecurity

Malicious Triton App Fork Emerges On GitHub, Posing Threat To Cybersecurity

CYBER ATTACKZerowl

A malicious fork of the well-known macOS app Triton was recently discovered on GitHub, which has caused concern in the cybersecurity community. The app's.

Hackers Exploit QR Codes To Spread Phishing and Malware Across Mobile Phones

Hackers Exploit QR Codes To Spread Phishing and Malware Across Mobile Phones

CYBER ATTACKZerowl

Because they make it simple for people to access websites, make payments, and download apps, QR codes have become commonplace in daily life This article.

Dell Zero-Day Actively Abused by China-Linked Threat Actors to Install Malware

Dell Zero-Day Actively Abused by China-Linked Threat Actors to Install Malware

CYBER ATTACKZerowl

Since mid-2024, Chinese state-sponsored hackers have been focusing on a critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines This.

Dell 0-Day Vulnerability Exploited by Chinese Hackers Since mid-2024 to Deploy Malware

Dell 0-Day Vulnerability Exploited by Chinese Hackers Since mid-2024 to Deploy Malware

CYBER ATTACKZerowl

Dell's Zero-Day Vulnerability Dell RecoverPoint for Virtual Machines is the target of a serious zero-day exploitation campaign. The vulnerability.

Cybercriminals Leverage Atlassian Cloud for Spam Campaigns Redirecting Targets to Fraudulent Investment Schemes

Cybercriminals Leverage Atlassian Cloud for Spam Campaigns Redirecting Targets to Fraudulent Investment Schemes

CYBER ATTACKZerowl

Using Atlassian Cloud's reliable infrastructure, cybercriminals have started a sophisticated spam campaign. Attackers are successfully evading.

Critical Windows Admin Center Vulnerability Allows Privilege Escalation

Critical Windows Admin Center Vulnerability Allows Privilege Escalation

CYBER ATTACKZerowl

Admin Center Vulnerability in Windows CVE-2026-26119 is a critical security update that fixes a high-severity elevation of privilege vulnerability in.

Critical Log Poisoning Vulnerability in OpenClaw AI Allows Content Manipulation

Critical Log Poisoning Vulnerability in OpenClaw AI Allows Content Manipulation

CYBER ATTACKZerowl

Organizations are vulnerable to indirect prompt injection attacks due to a critical "log poisoning" vulnerability in the popular OpenClaw AI assistant.

Keenadu Android Backdoor Spreads Through Google Play to Gain Remote Control Access by Infecting Firmware

Keenadu Android Backdoor Spreads Through Google Play to Gain Remote Control Access by Infecting Firmware

CYBER ATTACKZerowl

Android malware from Keenadu An advanced new Android backdoor that allows attackers to take remote control of victims' phones and tablets by infecting.

As a malicious fork of a legitimate Triton app appears on GitHub, malware is out in the wild.

As a malicious fork of a legitimate Triton app appears on GitHub, malware is out in the wild.

CYBER ATTACKZerowl

On GitHub, a malicious fork of the trustworthy macOS app Triton has emerged, using open-source repositories to spread malware This article explores.

Phishing attacks and malicious apps are distributed across mobile devices via QR codes.

Phishing attacks and malicious apps are distributed across mobile devices via QR codes.

CYBER ATTACKZerowl

Although QR codes are now commonly used to pay bills, open links, and log in, their speed also allows attackers to quickly lure victims from the real.

Washington Hotel Located in Japan Suffers Ransomware Attack

Washington Hotel Located in Japan Suffers Ransomware Attack

CYBER ATTACKZerowl

Japan's Washington Hotel Suffers Attack by Ransomware The hotel acknowledged that a ransomware attack had compromised a number of its servers, causing.

US Law Firm Accuses Lenovo of Bulk Data Transfers to China

US Law Firm Accuses Lenovo of Bulk Data Transfers to China

CYBER ATTACKZerowl

A U.S This article explores alleging lenovo violated. . law firm has filed a proposed class action alleging that Lenovo violated the Justice Department's.

Phishing Kit Hosted on Legitimate Cloud and CDN Platforms Targeting Microsoft and Google Users

Phishing Kit Hosted on Legitimate Cloud and CDN Platforms Targeting Microsoft and Google Users

CYBER ATTACKZerowl

Phishing kit infrastructure is increasingly being hosted on reputable cloud and CDN platforms instead of newly registered domains, according to ANY.RUN.

India’s Largest Pharmacy Exposes Customer Personal Details and Access to Internal Systems

India’s Largest Pharmacy Exposes Customer Personal Details and Access to Internal Systems

CYBER ATTACKZerowl

India's Biggest Pharmacy Reveals A significant flaw in a Zota Healthcare division's platform exposed private client and internal system information.

EU Parliament Blocks AI features on Corporate Devices Over Cybersecurity Concerns

EU Parliament Blocks AI features on Corporate Devices Over Cybersecurity Concerns

CYBER ATTACKZerowl

AI features are blocked by the EU Parliament This article explores eu strengthen data. . Citing unresolved cybersecurity and data protection risks, the.

The 0APT ransomware group claims to have 200 victims, but no actual data is delivered.

The 0APT ransomware group claims to have 200 victims, but no actual data is delivered.

CYBER ATTACKZerowl

In late January 2026, a brand-new ransomware operation known as 0APT appeared on the dark web, claiming to have compromised more than 200 organizations in.

Washington Hotel Suffers Ransomware Attack, Systems Disrupted

Washington Hotel Suffers Ransomware Attack, Systems Disrupted

CYBER ATTACKZerowl

A ransomware attack that affected multiple servers on February 13, 2026, was confirmed by the Washington Hotel, a well-known chain in Japan. When the IT.

Threat Actors Attacking OpenClaw Configurations to Steal Login Credentials

Threat Actors Attacking OpenClaw Configurations to Steal Login Credentials

CYBER ATTACKZerowl

In the realm of personal AI assistants, cybercriminals have found a new avenue for attack This article explores ai assistants cybercriminals. . According.

Russia Announces Nationwide Telegram Ban Effective April 1

Russia Announces Nationwide Telegram Ban Effective April 1

CYBER ATTACKZerowl

According to the insider channel Baza, Russia intends to impose a nationwide ban on Telegram beginning April 1, 2026, making the well-known messaging app.

India’s Largest Pharmacy Exposes Customer Personal Data and Internal System Access

India’s Largest Pharmacy Exposes Customer Personal Data and Internal System Access

CYBER ATTACKZerowl

Customer personal information and backend systems were exposed due to a serious security breach at Dava India, one of the largest generic pharmacy retail.

Firefox v147.0.3 Released With Fix for Heap Buffer Overflow Vulnerability

Firefox v147.0.3 Released With Fix for Heap Buffer Overflow Vulnerability

CYBER ATTACKZerowl

Mozilla has released Firefox version 147.0.3, fixing a serious memory-related vulnerability that could let hackers run arbitrary code by taking advantage.

Cybercriminals Behind 0APT Ransomware Claim 200 Attacks, Provide No Data

Cybercriminals Behind 0APT Ransomware Claim 200 Attacks, Provide No Data

CYBER ATTACKZerowl

Discover how When the 0APT ransomware group first appeared on the Dark Web on January 28, 2026, it immediately attracted notice by claiming to have 200.

An OpenClaw AI Agent Critical Log Poisoning Vulnerability Permits the Injection of Malicious Content

An OpenClaw AI Agent Critical Log Poisoning Vulnerability Permits the Injection of Malicious Content

CYBER ATTACKZerowl

A vulnerability known as "log poisoning" has been fixed in OpenClaw AI Agent Log Poisoning, a rapidly emerging open-source AI assistant that can connect.

Top 5 this week

Page 54 of 73