CYBER ATTACK

Cisco has revealed multiple high-severity vulnerabilities in ClamAV that could disrupt antivirus scans and cause denial-of-service conditions This article.

Mozilla has rotated and revoked an unauthorized GPG key used in Firefox and Thunderbird release artifacts after unencrypted copies of the previous key.

A supply chain breach involving LiteLLM underscores how a fleeting malicious package can lead to long-term vulnerabilities across cloud environments.

Kimsuky has been spotted combining polished AI-generated documents with traditional phishing techniques to spread AsyncRAT, a remote-access trojan This.

Physical attackers can exploit vulnerabilities in HP ThinPro’s TPM-backed disk encryption system by modifying unencrypted boot files, enabling extraction.

Horizon3 Invests $20 Million in Partner Ecosystem Expansion, Focusing on Proactive Security Services Modern cybersecurity operations are under increasing.

Attackers are probing VMware vCenter after critical vulnerabilities were revealed, with DefusedCyber’s honeypots noting heightened vCenter fingerprinting.

A malicious Chrome extension posing as GoogleTranslate enables threat actors to steal sensitive information, live-stream web sessions, and remotely.

The attack combines ClickFix social engineering, blockchain-based EtherHiding, and dynamic infrastructure delivery to make detection and takedown more.

SUSE has addressed a critical privilege escalation vulnerability within Rancher that could enable a low-privileged authenticated user to gain.

A newly reported set of 23 vulnerabilities has been identified in Copeland’s XWEB Pro commercial refrigeration controller lineup, including an.

The energy sector in Poland was recently targeted by an attack that started with a compromised remote-access device, revealing how such vulnerabilities.

Anthropic is altering default permission settings in Claude Code, aiming to enhance AI classifiers' reliability for detecting dangerous commands more.

An Australian gym's booking software was exploited by an autonomous AI cyberattack orchestrated by a Claude-powered agent on the OpenClaw framework This.

The U.S This article explores vulnerability sonicwall sma1000. . Cybersecurity and Infrastructure Security Agency (CISA) has added a critical.

Discover how Chinese hackers are luring Windows users into downloading fake software pages that mimic popular AI tools like DeepSeek and Quark Cloud.

BdThemes, a popular WordPress plugin provider, has fallen victim to a supply chain compromise that allows attackers to create rogue administrator accounts.

Anthropic is introducing invisible text watermarks and cryptographically signed metadata for content generated or processed by its Claude AI models.

A critical vulnerability chain in WordPress Core, known as XSS2Shell, enables full remote code execution via a single failed login attempt on any active.

The default Windows 11 Weather app, installed on millions of users' taskbars, has come under scrutiny following independent testing that revealed it.

Welcome to this edition of the ZeroOwl weekly cybersecurity newsletter — your cybersecurity bulletin covering the 50 most important stories from August 3.

This week's roundup highlights the exploitation of Apache Tomcat and SonicWall SMA vulnerabilities, a nearly two-decade-old Linux kernel flaw, critical.

A campaign was identified on August 4, 2026, targeting the maintainer of Keyv, a popular JavaScript key-value storage library This article explores.

Discover how Arctic Wolf has detected an ongoing Microsoft 365 phishing campaign targeting organizations within healthcare, education, manufacturing.

A supply chain attack on BdThemes WordPress plugins exposed administrators to account takeover, webshell deployment, and persistent backdoors This article.

Microsoft is set to introduce a new Security Detection Report within the Teams admin center, providing administrators with an eagerly awaited.

A severe unauthenticated SQL injection vulnerability in Metabase has been exploited by attackers for maximum privileges and credential theft across.

Metabase, a popular open-source business intelligence and data visualization tool, has disclosed an active zero-day vulnerability known as.

A newly revealed technique demonstrates how malware in a compromised Windows user session can exploit the Windows Hello for Business (WHFB) system's.

Levi Strauss & Co This article explores method intrusion phishing. . Levi Strauss Cyberattack Utilizes Social Engineering for Infiltration Levi Strauss.