LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Nightmare-Eclipse Drops ShieldBreak Windows Defender 0-day Vulnerability

Nightmare-Eclipse Drops ShieldBreak Windows Defender 0-day Vulnerability

CYBER ATTACKZerowl

The prolific and controversial security researcher known as Nightmare-Eclipse (also tracked under Chaotic Eclipse) has released a ninth Windows zero-day.

New WindRelay Android Malware Relays Bank Cards While SpyNote RAT Controls Victim Phones

New WindRelay Android Malware Relays Bank Cards While SpyNote RAT Controls Victim Phones

CYBER ATTACKZerowl

A new malware family called WindRelay is being used with SpyNote Remote Access Trojan (RAT) to steal money through live NFC card-relay fraud This article.

New Plug & Pwn Attack Abuses Windows Plug and Play to Gain SYSTEM Privileges

New Plug & Pwn Attack Abuses Windows Plug and Play to Gain SYSTEM Privileges

CYBER ATTACKZerowl

A newly disclosed "Plug & Pwn" attack chain exploits Windows' Plug and Play (PnP) driver installation process to execute unauthorized code as SYSTEM This.

New Phishing Attack Uses SSL/TLS Certificates to Target Customers of High-Value Brands via WhatsApp

New Phishing Attack Uses SSL/TLS Certificates to Target Customers of High-Value Brands via WhatsApp

CYBER ATTACKZerowl

A new phishing attack is leveraging web certificates and chosen URLs to target high-value brand customers via WhatsApp This article explores new phishing.

New GhostJacking Attacks Hijack AI Agents to Bypass Firewalls and Steal Cloud Credentials

New GhostJacking Attacks Hijack AI Agents to Bypass Firewalls and Steal Cloud Credentials

CYBER ATTACKZerowl

A newly revealed "Ghostjacking" attack pattern exploits trusted operational data such as blocked web requests and monitoring alerts within enterprises.

New Abyssos RAT Hijacks Browser Sessions, Steals Credentials and Gives Attackers Remote VNC Access

New Abyssos RAT Hijacks Browser Sessions, Steals Credentials and Gives Attackers Remote VNC Access

CYBER ATTACKZerowl

Abyssos functions as a post-exploitation framework This article explores abyssos malware employs. . Once an attacker gains access to a device, they can.

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Mozilla has removed the cryptographic key used for downloading Firefox and Thunderbird on Linux due to an accidental commit of it to one of their own.

Microsoft SharePoint RCE Flaw Chains Allow Unauthenticated Server Takeover

Microsoft SharePoint RCE Flaw Chains Allow Unauthenticated Server Takeover

CYBER ATTACKZerowl

A newly discovered vulnerability in Microsoft SharePoint Server has raised significant concerns among enterprise security defenders following researchers’.

Microsoft Patches 398 Windows Flaws Including Actively Exploited WinSock Zero-Day

Microsoft Patches 398 Windows Flaws Including Actively Exploited WinSock Zero-Day

CYBER ATTACKZerowl

Microsoft has released security updates for August 2026, addressing 398 CVEs across Windows, Office, SharePoint Server, Azure services, .NET, PowerShell.

Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days

Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days

CYBER ATTACKZerowl

Discover how Microsoft has released its August 2026 Patch Tuesday security updates, addressing over 394 vulnerabilities across various Microsoft products.

Top 5 this week

Page 18 of 271