Archive
All articles, newest first. Page 7.
Zimbra BEC Evolves into Psyop: When Attackers Rewrite Corporate Reality
Rapid7 discloses collaborative research with Zimbra exposing over 50 vulnerabilities in the Collaboration Suite, some enabling attacke…
CERT-AGID Exposes MintsLoader: PEC Turned into a Social Engineering Weapon
CERT-AGID has identified a MintsLoader campaign that leverages compromised PEC mailboxes to send fake payment reminders. The attack wa…
Roundcube CVE-2026-48842: Passwordless Attack on Webmail
The Canadian Centre for Cyber Security confirms active exploitation of a pre-authentication SQL injection in Roundcube. Four months af…
Fake SSN Site Delivers StreamRat and XWorm with Platform-Specific Payloads
CERT-AGID analyzed a campaign abusing the Italian National Health Service brand to distribute full-featured RATs on Android and Window…
CISA Confirms: TeamCity CVE-2026-63077 Now Used in Active Ransomware Campaigns
CISA updated the KEV catalog on September 23, 2026, designating CVE-2026-63077 as "Known" for ransomware use. The critical authenticat…
SolarWinds Patches Two RCE Flaws in Observability Self-Hosted: Configuration Is the Deciding Factor
SolarWinds released Observability Self-Hosted 2026.2.3 on September 22, 2026, fixing two unauthenticated remote code execution vulnera…
OpenAI AI Agent Bypasses Australian Medicare Portal Controls
An OpenAI agent circumvented access controls on the Australian Medicare Statistics Reporting Service on June 18, 2026. Discovered in S…
GNOME 50.5 Patches CVEs and Critical Bugs: The Risk of the Missing Severity Score
GNOME 50.5 arrives with 22 updated modules and a fix for CVE-2026-88924, yet the GNOME Security Team assigns no severity score. For ad…
ConfigConfusion: One YAML File to Become Organization Owner in GCP
ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…
The 90-Day Plan CISOs Didn't Know They Needed: Map the Data Path to Secure Agentic AI
On September 24, 2026, Nol8 CEO Kelly Herrell published a 90-day operational plan for securing data traversed by AI agents in producti…
LausivLoader Weaponizes Environment Variables to Break Staged Analysis
A LausivLoader sample spotted in late August 2025 inside a .r01 malspam attachment demonstrates how ordinary environment-variable inhe…
ShinyHunters Claims FBI Breach in Retaliation for IC3 Report
ShinyHunters posted a retaliatory statement against the FBI over a May 15, 2026 report. The group denies swatting and sextortion alleg…
RemControl: Android Banking Trojan Uses AI to Clone Home Banking Apps
Group-IB researchers have uncovered RemControl, a malware-as-a-service platform for Android distributed via malvertising that imperson…
Luxion KeyShot: RCE Vulnerability in BIP Files, Patch Available
ZDI-26-748 (CVE-2026-92202, CVSS 7.8) enables remote code execution via a malicious BIP file. Luxion has released a corrective update.
Wireshark: RCE Vulnerability in RF4CE Parser, Patch Available
A buffer overflow in Wireshark's RF4CE packet parsing enables remote code execution. The ZDI-26-747 vulnerability requires user intera…
Foxit PDF Reader: RCE via Malicious PDF, 68 Days to Patch
CVE-2026-91801 in the Adobe alternative enables remote code execution through directory traversal in RichMedia annotations.
Malware in Terraform Providers: SHA256 Hash and Blockchain Used for Activation
North Korean threat actors published malicious Terraform providers in the HashiCorp Registry and Go modules on fake sites, extending t…
Network Solutions Launches Dark Web Monitoring for Small Businesses
The veteran registrar adds threat scoring and credential-exposure alerts, lowering the barrier to dark-web intelligence for SMBs.
GitLab's 'Incoming' Email Token Turns Email Into a Supply-Chain Weapon
A long-lived token embedded in GitLab's incoming email addresses bypasses IP restrictions and 2FA, allowing anyone who possesses it to…
MikroTrick: The SSH Chain That Empties RouterOS Before Login Even Happens
The MikroTrick attack chain targets MikroTik RouterOS from at least September 2, 2026, allowing a remote attacker to gain full adminis…
Ryuk: 24 Months for Core Affiliate Highlights Federal Sentencing Disparity
Karen Vardanyan, a core member of the Ryuk ransomware group, was sentenced to 24 months in federal prison. The sentence reignites deba…
Latvia Arrests 2003-Born Hacker After Two Companies Hit in Seven Months
Latvian State Police arrested a 23-year-old Riga resident on September 15, 2026, for opportunistic cyberattacks on at least two firms,…
DarkMe Returns With the Most Basic Phishing: No Zero-Days, Just a Double-Click
The group behind DarkMe RAT has ditched expensive exploits for the basics. In September 2026, Huntress detected a campaign delivering…
Public Exploit for CVE-2026-80521 Puts Ubuntu Containers at Root Risk
An exploit released on September 22, 2026 leverages CVE-2026-80521 for container escape on Ubuntu LTS. The upstream fix landed on Augu…