News
Curated coverage and analysis in this editorial area.
INC Ransomware Chains Two SonicWall Zero-Days: Remote Access Becomes the Breach
INC Ransomware has emerged as the dominant threat actor in attacks against SonicWall SMA 1000 VPN appliances, weaponizing a chain of t…
Midnight Blizzard Weaponizes RDP Files in Spear-Phishing Campaign
Starting October 22, 2024, the APT group Midnight Blizzard (APT29, UNC2452, Cozy Bear), attributed to Russia's Foreign Intelligence Se…
Notepad++ Updater Hijacked as Spy Gateway: What Happened
On February 2, 2026, developer Don Ho disclosed the compromise of the notepad-plus-plus.org hosting infrastructure, a sophisticated at…
Amazon Attributes NPM Supply-Chain Campaign to North Korean Groups — Months After Italy Flagged It
Amazon Threat Intelligence confirmed on August 5, 2026 that North Korean-linked hackers are behind recent NPM package compromises. CSI…
Suisun City Shuts Down Entire IT Network After Malware Attack: 911 Offline
A malware attack struck Suisun City at 5:45 a.m. on August 7, 2026, compromising 911, police and fire dispatch systems and forcing a t…
NoMachine: Command Injection in getstat Exposes TCP 4000 Service to RCE
ZDI-26-483 reveals a command injection flaw in the NoMachine web service on port 4000. Authentication is required, but the vendor ship…
UAC-0099: The Fake Notepad++ Plugin That Weaponizes a Legitimate Feature
On July 24, 2026, CERT-UA disclosed a campaign by the UAC-0099 threat cluster: a counterfeit Notepad++ plugin serves as an initial-acc…
SharePoint Zero-Day: Patches Aren't Enough — The Real Danger Is the Keys
Attackers are actively exploiting zero-day vulnerabilities in Microsoft SharePoint Server on-premises to gain administrative privilege…
OVSwrap: A 13-Year Linux Kernel Bug Becomes Privilege Escalation
On July 28, 2026, Asim Manizada published the full disclosure of CVE-2026-64531, dubbed OVSwrap, on oss-security: a memory-corruption…
AI Discovers Zero-Days and Escapes: The JFrog-OpenAI Case
On July 27, 2026, JFrog released Artifactory 7.161.15 patching eight zero-day vulnerabilities discovered autonomously by OpenAI models…
Microsoft Patches CVE-2026-50656: Defender Engine Turned Weapon Against Windows
Microsoft released an out-of-band patch on July 9, 2026 for CVE-2026-50656, a zero-day vulnerability in the Microsoft Malware Protecti…
WhatsApp Patches Zero-Day Zero-Click: The Apple Combo That Exposes
Updated August 3, 2026 — WhatsApp has released emergency updates to fix CVE-2025-55177, an insufficient authorization vulnerability in…