CYBER ATTACK

First detected in July 2025, this group has already compiled a list of over 80 organizations on its leak site known as the DeadLock blog This article.

Dark web markets persist despite forum closures, arrests, and disruption efforts. Criminal organizations swiftly adapt by utilizing new platforms, replica.

WordPress 7.0.4 has been released, addressing a critical security patch that closes a remote code execution vulnerability impacting sites utilizing the.

Broadcom VMware vCenter administrators are grappling with an intrusion campaign targeting CVE-2026-59310, a severe directory-traversal vulnerability in.

Adobe has released an urgent security update for Adobe Commerce and Magento Open Source, addressing several vulnerabilities that could enable attackers to.

A newly disclosed Docker vulnerability, tracked as CVE-2026-17106 and nicknamed “CopyEscape,” allows malicious containers to overwrite files on the host.

A newly disclosed vulnerability, tracked as CVE-2026-17106, enables malicious containers to escape their designated hosts via `docker cp`, overwriting.

Security researchers have discovered CNCMachineRMS, a 1.14 MB x64 remote access trojan (RAT) that is part of a BabaDeda-based infection chain. The final.

Cisco has issued a warning about multiple vulnerabilities in ClamAV that could disrupt file scans on affected Cisco Secure Endpoint Connector.

Security teams managing Cisco edge infrastructure must prioritize patching due to a high-priority deadline following Cisco's confirmation of active.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that two SonicWall SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are.

A critical SQL injection flaw in Metabase, identified as CVE-2026-72898, can enable unauthenticated remote attackers to compromise vulnerable instances.

A newly discovered version of the Kimwolf botnet has introduced sophisticated techniques to evade detection by mimicking legitimate Chrome browsing.

China-linked cybercriminals have launched what experts call a groundbreaking fully autonomous cyberattack on a foreign government, using open-source.

CAV3RN is a modular espionage framework that becomes harder to detect on networks This article explores listed cav3rn associated. . Its latest.

Project CAV3RN has expanded its cyberespionage toolkit with a new command-and-control (C2) system that conceals traffic through Google Apps Script This.

SpecterOps has released Blacklight, an open-source toolkit designed to identify and detect local artifacts from AI coding agents such as Codex, Claude.

Discover how Armored Likho, also known as Eagle Werewolf, has initiated a new cyberespionage campaign targeting individuals and organizations in Russia.

Anthropic plans to introduce invisible watermarks and metadata for content created by Claude AI, following its adherence to the European Union's AI Act’s.

Hundreds of advertised free VPN or proxy tools have been linked to a significant traffic redirection operation This article explores proxy tools linked.

A recent study reveals that 548 internet-connected building automation devices near U.S This article explores bacnet controllers niagara. . These affected.

Stolen login credentials are so prevalent that they can be bought for almost nothing on the black market This article explores logged authentication.

A new Android fraud operation reveals how quickly a convincing phone call can lead to financial loss. Combining SpyNote, a remote-control tool, with.

Global malware activity surged significantly over the past week, with remote access trojans (RATs), information stealers, and loaders experiencing notable.

Red Hat has identified and disclosed a significant privilege escalation flaw, labeled CVE-2026-10090, impacting the Application Subscription controller.

Discover how Cybercriminals are leveraging phishing emails to infiltrate Microsoft 365 accounts and search for payroll-related files. Ref id: [random.

A new "Pass-the-Passkey" family of attack techniques showcases how systemic implementation flaws in WebAuthn can compromise passkey security, even when.

OpenAI has expanded its Daybreak program to provide more extensive access to frontier AI models for vetted cybersecurity defenders This article explores.

A novel "Ghostjacking" attack technique has been identified, enabling attackers to manipulate and control AI-driven coding agents via subtle manipulation.

Security researchers have discovered a new modular remote access trojan called Abyssos, an advanced C++ malware family that grants attackers extensive.