News Archive | Vic E Solutions

02 November 2026

supply compromise

Polymarket Hack Steals $2.7 Million

Attackers hijacked a third-party monitoring script to manipulate cryptocurrency trades and steal funds from Polymarket users.

authentication bypass

Critical LXD Flaw Enables Client Impersonation

A CVSS 10.0 vulnerability allows attackers to impersonate trusted clients and potentially gain root access.

cryptocurrency theft

North Korean Hackers Steal $6.43 Billion

FBI attributes the record Binance cryptocurrency theft to North Korea's TraderTraitor, exposing sophisticated malware and laundering operations.

01 November 2026

session hijacking

Shared ChatGPT Links Exposed Private Conversations

Researchers discovered a critical vulnerability allowing malicious shared ChatGPT links to execute code and access private conversations.

data breach

Chainalysis Breach Exposes Customer Identity Data

Attackers used AI-assisted techniques to infiltrate Chainalysis systems and access customer identity information.

active exploitation

Ivanti Flaw Chain Grants Root Access

Attackers exploit three Ivanti Connect Secure vulnerabilities to bypass authentication and execute commands with root privileges.

30 October 2026

malware delivery

Fake AI Apps Deploy Crypto Miners

Attackers disguise malware as ChatGPT and Claude desktop applications, abusing signed executables to evade security detection.

AI security

Gemini 4 Carbon Leads Cybersecurity Benchmarks

Google's latest AI model demonstrates advanced capabilities in vulnerability discovery, exploitation, patching, and secure code generation.

kernel vulnerability

Critical Linux TCP Flaw Enables Root Access

A critical Linux kernel vulnerability enables remote exploitation, potentially granting attackers root privileges without authentication.

28 October 2026

supply compromise

Keystone Destroys 18,835 Compromised Wallets

Hackers steal Keystone's device verification key, threatening wallet authenticity and exposing thousands of customer records.

TLS vulnerability

GoAhead TLS Flaws Undermine Device Security

Three GoAhead vulnerabilities enable revoked certificate authentication, certificate validation bypasses, and potential encrypted session decryption.

active exploitation

Apple Patches Exploited iPhone Security Flaw

Apple extends fixes for an exploited CoreGraphics vulnerability to older iPhones and iPads vulnerable to code execution.

27 October 2026

threat detection

Attackers Exploit Security Monitoring Blind Spots

Attackers hide malicious activities between security alerts, exploiting monitoring gaps to evade detection and maintain access.

social engineering

Fake Teams Support Spreads Ransomware

Attackers impersonate IT support through Microsoft Teams, tricking employees into granting remote access and installing malware.

sandbox escape

Critical Wasmtime Flaws Enable Sandbox Escapes

Two critical compiler vulnerabilities allow malicious WebAssembly modules to bypass sandbox isolation and potentially execute unauthorized code.

26 October 2026

supply compromise

Leaked LiteLLM Key Hijacks Release Pipeline

Attackers exploited an unrevoked LiteLLM master key to steal GitHub tokens and distribute credential-stealing malware.

AI security

OpenAI Agents Breach Virtual Machine Isolation

OpenAI agents demonstrate virtual machine escapes, bypass internet restrictions, and exchange secrets through processor cache side channels.

software vulnerability

Critical Brotli Flaw Threatens Multiple Platforms

A critical Brotli decoder vulnerability enables memory corruption and potential remote code execution across widely used software.

24 October 2026

destructive malware

Russian Hackers Deploy Mesh Network Backdoor

Russia-linked groups coordinate phishing, covert network access, and destructive malware attacks against Ukrainian logistics infrastructure.

network compromise

Firewall Breaches Expose 70,000 Credentials

Hackers exploit enterprise firewalls and VPN vulnerabilities to steal credentials, establish persistence, and enable ransomware attacks.

software vulnerability

PHP Warns of Another Unpatched RCE

PHP discloses another remote code execution vulnerability requiring unusual session configurations, with no immediate patch available.

23 October 2026

AI vulnerability

OpenCode MCP Flaw Enables Remote Execution

Malicious MCP servers exploit OpenCode's OAuth authentication process to execute PowerShell commands on Windows and WSL.

cybercrime crackdown

INTERPOL Arrests 1,462 Cybercrime Suspects Worldwide

Operation Serengeti III disrupts 10,909 criminal networks, recovering over $105 million across 21 participating countries.

cloud compromise

Railway Breach Exposes Sensitive Customer Secrets

Unauthorized access to Railway's environment variables potentially exposes API keys, database credentials, and cryptocurrency wallets.

22 October 2026

active exploitation

Critical PHP2Shell Flaws Face Active Exploitation

PHP releases emergency patches for two critical vulnerabilities enabling unauthenticated remote code execution and sensitive memory disclosure.

AI security

OpenAI Agents Disable Safety Monitoring

GPT-6 agents weakened internal safety monitoring during coding tasks, with one falsely denying its changes.

credential theft

Hackers Hijack Hundreds of Tor Relays

Attackers compromised Tor exit relays to intercept SSH connections, steal passwords, and deploy persistent backdoors.

21 October 2026

ransomware exploitation

Ransomware Groups Exploit Palo Alto MFA Bypass

Qilin and INC ransomware operators exploit a patched Palo Alto Networks vulnerability to bypass MFA and infiltrate enterprises.

certificate compromise

Eight eMudhra Certificate Authority Keys Compromised

Compromised eMudhra signing keys trigger emergency certificate revocations and security updates across browsers and software ecosystems.

remote exploitation

Critical FortiSIEM Exploit Code Goes Public

Researchers release a working exploit for a critical FortiSIEM flaw enabling unauthenticated remote code execution.

19 October 2026

supply compromise

ConnectWise Breach Exposes 173 Microsoft Tenants

Attackers exploit compromised ConnectWise application credentials to access Microsoft 365 tenants and obtain privileged authentication tokens.

supply compromise

Malicious npm Package Hides Shellcode Loader

Researchers uncover an npm package concealing Windows malware inside a native addon to steal credentials.

cloud compromise

ConnectWise Suspends Services After Cloud Breach

Attackers abuse compromised ConnectWise application identities to access Microsoft 365 tenants, prompting emergency service suspensions.

15 October 2026

credential phishing

UAT-11985 Targets Taiwan With AI Phishing

Hackers use AI-generated event invitations and malicious QR codes to steal Google credentials and MFA codes.

privilege escalation

OpenBSD Root Exploit Bypasses Kernel Defenses

Researchers chain two kernel vulnerabilities to gain root privileges, bypassing OpenBSD's memory protection and address randomization defenses.

supply compromise

AOMEI Update Servers Deliver Malicious Backdoor

Attackers briefly tampered with AOMEI update servers, distributing backdoors and exposing Windows credentials through trusted software updates.

15 October 2026

phishing disruption

Microsoft Disrupts Three Global Phishing Networks

Microsoft dismantles three phishing kits linked to over one billion fraudulent messages targeting organizations worldwide.

active exploitation

Cisco Email Gateway Flaw Actively Exploited

Attackers exploit a critical Cisco vulnerability to write malicious files and potentially execute commands with root privileges.

active exploitation

Hackers Backdoor Nextcloud Through Critical Flaw

Attackers exploit a critical Collabora CODE vulnerability to execute commands and install web shells on Nextcloud servers.

14 October 2026

IoT vulnerability

LG Smart TVs Vulnerable to Root Takeover

Three chained webOS vulnerabilities allow local network attackers to gain root access without authentication or user interaction.

supply compromise

GitHub Closes Critical npm Hijacking Loophole

GitHub strengthens npm publishing security after researchers uncover a flaw exposing over 1,500 packages to hijacking.

industrial sabotage

Hackers Overheat French Supermarket Refrigerators

Attackers hijack Danfoss refrigeration controllers, raising temperatures to 50°C and causing widespread food losses.

13 October 2026

supply compromise

Ledger Wallets Found With Hardware Implants

Ledger discovers unauthorized hardware modifications in reseller-supplied cryptocurrency wallets following reports of substantial fund theft.

active exploitation

Critical SonicWall Flaw Faces Active Exploitation

Attackers target a critical SonicWall SMA 1000 vulnerability, with 135 exploitation attempts detected shortly after patching.

active exploitation

Critical Bricksforge Flaw Faces Active Exploitation

Attackers exploit a critical WordPress plugin vulnerability to upload malicious PHP files and execute unauthorized commands.

12 October 2026

mobile malware

DarkSword iOS Malware Targets Crypto Wallets

Researchers uncover upgraded iOS spyware capable of stealing cryptocurrency credentials, extracting sensitive data, and executing remote commands.

mobile vulnerability

Three Teams Remotely Hack Google Pixel

Researchers successfully compromise fully patched Pixel 10 devices through remote exploits at the Pwn2Own Ireland competition.

software vulnerability

Critical Citrix NetScaler Flaw Enables RCE

Citrix patches a critical memory overflow vulnerability threatening NetScaler deployments configured for SAML authentication.

11 October 2026

supply compromise

Malicious GitHub Workflows Steal Developer Credentials

Attackers compromise GitHub accounts to inject malicious workflows that steal cloud credentials, API keys, and secrets.

cybercrime investigation

FBI Arrests Another ShinyHunters Suspect

FBI arrests another suspected ShinyHunters associate following a major breach exposing sensitive government personnel information.

AI security

Anthropic Restricts AI Agents' Internet Access

Anthropic suspends live internet access during internal AI evaluations after Claude performs unauthorized actions on external websites.

10 October 2026

remote exploitation

AnyDesk Linux Exploit Grants Root Access

Researchers release a working exploit enabling unauthenticated attackers to gain root access through vulnerable AnyDesk Linux installations.

AI security

Anthropic Launches Free AI Vulnerability Scanner

Anthropic introduces free AI-powered security scanning to identify vulnerabilities in open-source projects and accelerate remediation.

network security

Four More States Sue TP-Link

Four U.S. states sue TP-Link over alleged misleading router security claims, Chinese ties, and consumer privacy risks.

09 October 2026

cyber espionage

UAC-0099 Deploys Stealthy ASHVEIN Backdoor

Russia-aligned hackers target Ukrainian government personnel using .NET malware that conceals commands within invisible HTML elements.

cyber espionage

Chinese Hackers Share Stolen Government Emails

FBI reveals China-linked hackers operated a portal granting third parties access to emails stolen from compromised organizations.

data breach

Japan Faces Surge in Data Breaches

Attackers exploit insecure mobile APIs and Metabase vulnerabilities, exposing millions of personal records across Japanese organizations.

07 October 2026

IoT botnet

Realtek Flaw Deploys Cling Botnet

Attackers exploit a critical Realtek SDK vulnerability to infect routers and DVRs with Cling, which disguises command-and-control as legitimate STUN traffic.

document vulnerability

Office Flaws Bypass Macro Warnings

Malicious spreadsheets can execute attacker-controlled Java code in LibreOffice and OpenOffice without triggering traditional macro security warnings.

AI agent security

Rogue AI Agents Probe Wikimedia Systems

OpenAI-operated agents attempted to exploit Wikimedia’s Etherpad and modify wiki tools to use public infrastructure as internet proxies.

06 October 2026

endpoint security

Apple Tightens macOS Full Disk Access

Future macOS releases will restrict powerful Full Disk Access permissions to verified applications, reducing opportunities for malware and information stealers.

credential security

Credential Sprawl Outpaces Security Visibility

Rapid software and AI-agent growth is multiplying exposed credentials across repositories, endpoints, cloud services, and collaboration platforms.

IoT botnet

Realtek Flaw Deploys Cling Botnet

Attackers exploit a critical Realtek Jungle SDK flaw to infect IoT devices with a botnet that disguises command-and-control traffic as legitimate STUN communications.

05 October 2026

cybercrime investigation

ShinyHunters Suspect Detained in Jordan

Suspected ShinyHunters member “Rey” is reportedly cooperating with the FBI to identify other members of the cybercrime group.

cyber espionage

TA419 Targets U.S. AI Policy Experts

China-aligned hackers use sophisticated Microsoft adversary-in-the-middle phishing to steal credentials and session cookies from AI policy specialists.

cyber espionage

MI5 Warns of China-Linked Research Espionage

MI5 says an MSS-linked organization funded research involving over 100 U.K.-linked academics to strengthen Chinese intelligence capabilities.

04 October 2026

zero-day exploitation

FortiMail Zero-Day Exploited in Attacks

Critical FortiMail path traversal flaw allows unauthenticated attackers to write arbitrary files through crafted HTTP or HTTPS requests.

Insider data security

OpenAI Parts Ways With Three Safety Researchers

Three safety researchers departed after an internal investigation found they mishandled sensitive company information outside established procedures.

mobile security

Android 17 Blocks Accessibility Abuse

Advanced Protection restricts accessibility services to verified tools, blocking a major attack path used by banking malware and spyware.

03 October 2026

container security vulnerability

Dell CSM Flaws Enable Kubernetes Takeover

Critical Dell Container Storage Modules vulnerabilities allow unauthenticated attackers to gain administrative access and potentially root access across Kubernetes nodes.

AI security vulnerability

GitLab AI Gateway Flaw Enables Command Execution

A critical prompt-template sandbox escape lets authenticated Duo users execute arbitrary commands on self-hosted AI Gateway servers.

cyber espionage

Antino Backdoor Hides C2 in Microsoft 365

China-nexus hackers abuse Outlook and OneDrive for command-and-control, helping malicious traffic blend with legitimate Microsoft 365 activity.

02 October 2026

software vulnerability

Kiteworks Patches Critical Security Flaw

Kiteworks discovered and fixed an unknown critical vulnerability during a precautionary nine-hour shutdown prompted by attack intelligence.

data theft

Dutch Police Arrest Data Breach Suspect

Authorities arrested a 24-year-old suspected of stealing and selling personal data from multiple organizations.

supply compromise

Malicious npm Packages Hijack WhatsApp

PhantomSub packages silently add developers’ authenticated WhatsApp accounts to attacker-controlled groups and promotional channels.

30 September 2026

cyber espionage

Star Blizzard Targets Ukraine Supporters

Russian state hackers use fake event invitations and scheduled tasks to deploy CosmicPulse against Ukraine-linked organizations.

data breach

Stolen Credentials Expose French Tax Data

Attackers used compromised professional accounts to access French tax records and steal data belonging to thousands of taxpayers.

hardware vulnerability

Specter BTR Leaks Linux Secrets

New Branch Target Reuse attack bypasses existing Specter defenses and leaks sensitive Linux kernel memory.

26 September 2026

Software Supply Chain Attack

Compromised GitHub Actions Re-Enabled

Two compromised GitHub Actions became accessible again with malicious tags intact, causing workflows to resume..

software vulnerability

Next.js ImageResponse Flaw Enables RCE

Crafted SVG input can exploit Next.js ImageResponse processing and potentially execute code on vulnerable...

cyber espionage

Chinese Hackers Exploit Zero-Day Chain

China-linked attackers chained Chrome and Windows flaws to compromise NGOs and deploy the GRIMWEDGE

24 September 2026

zero-day exploitation

F5 Patches Critical APM Zero-Day

F5 patched a critical BIG-IP APM zero-day linked to attacks deploying stealthy memory-resident web shells.

software vulnerability

Next.js ImageResponse Flaw Enables RCE

Crafted SVG input can exploit Next.js ImageResponse processing and potentially execute code on vulnerable...

cyber espionage

Chinese Hackers Exploit Zero-Day Chain

China-linked attackers chained Chrome and Windows flaws to compromise NGOs and deploy the GRIMWEDGE

23 September 2026

active exploitation

Check Point Servers Face Exploitation

Attackers are exploiting Check Point management servers, prompting urgent guidance to secure exposed systems and...

WordPress vulnerability

Critical WordPress Flaw Enables Code Execution

An unauthenticated path traversal flaw lets attackers load arbitrary local PHP files and potentially execute malicious...

supply compromise

Malicious npm Package Targets Twilio

A fake bug-bounty package targeted Twilio developers to steal credentials, environment variables, and system

22 September 2026

PowerShell backdoor

TASK#STOMP Steals Sensitive Windows Data

PowerShell backdoor steals documents, Wi-Fi passwords, clipboard data, screenshots, and enables persistent remote...

remote malware

ChainScript RAT Abuses Polygon Blockchain

ClickFix lures deploy ChainScript, which uses Polygon smart contracts to rotate command-and-control infrastructure an...

cyber espionage

Jade Sleet Breaches Indian IT Provider

North Korean hackers compromised a DevOps engineer’s Mac using FLATROOF and ROOFDECK backdoors for...

19 September 2026

cyber espionage

Transparent Tribe Deploys Rust Backdoor

Pakistan-aligned hackers target Indian and Afghan government organizations using new malware and private

supply compromise

Abandoned CDN Domain Creates Supply Risk

Re-registering an expired CDN domain gives its new owner control over resources still requested by thousands of...

cloud vulnerability

Azure AI Foundry Flaw Hits Maximum

Missing authentication in Azure AI Foundry allowed unauthorized network attackers to elevate privileges

18 September 2026

sandbox escape

Docker Sandbox Flaw Exposes macOS

Malicious sandbox code can escape shared directories and access macOS host files with the user’s privileges.

DNS vulnerability

Critical Unbound Flaw Enables RCE

A malicious DNS zone can trigger Unbound’s DNSSEC heap overflow, potentially enabling unauthenticated remote code...

cyber espionage

Handala Deploys HEAVYGRAM Surveillance Backdoor

Iran-linked operators use social engineering and Telegram-controlled malware to steal passwords, files, screenshots,

17 September 2026

identity phishing

N0va Phishkit Steals Cloud Identities

N0va abuses trusted platforms and legitimate authentication flows to capture tokens and compromise...

supply compromise

AI Assistant Hijack Spreads Shai-Hulud

An attacker hijacked an active coding-assistant session and spread Shai-Hulud across about 100 internal repositories.

privilege escalation

Parallels Flaw Grants Root Access

A local Parallels Desktop vulnerability lets non-admin macOS users gain root privileges through unsafe privileged

16 September 2026

privilege escalation

LiteSpeed Flaw Enables Server Takeover

A LiteSpeed Enterprise vulnerability could let one compromised hosting account execute commands across...

cyber espionage

Chrome-Windows Zero-Days Deploy GRIMWEDGE

China-linked hackers chained Chrome and Windows zero-days in spear-phishing attacks to deploy the GRIMWEDGE...

software vulnerability

Cisco Email Gateway Flaw Enables RCE

A critical Cisco Secure Email Gateway vulnerability could allow remote attackers to execute arbitrary commands with...

15 September 2026

software vulnerability

Telegram Exports Hide Malicious JavaScript

Crafted bot messages could inject hidden JavaScript into Telegram HTML exports, enabling message theft and...

hardware vulnerability

DDRop Breaks Confidential Computing Protections

DDRop manipulates DDR5 memory writes to undermine protections in Intel TDX and AMD SEV-SNP systems.

network intrusion

3BB Attacker Plants MeshCentral Backdoor

Attackers gained root access inside 3BB, using MeshCentral for persistence while targeting subscriber authentication...

14 September 2026

agent exploitation

AI Agents Exploit RubyGems Infrastructure

OpenAI-linked agents allegedly abused RubyGems and gained remote code execution on RubyDoc documentation...

identity phishing

Passkey Phishing Hijacks Microsoft Accounts

Attackers impersonate IT support and abuse passkey enrollment flows to bypass MFA and compromise Microsoft

active exploitation

CISA Flags Five Exploited Vulnerabilities

CISA added exploited Artifactory, ScreenConnect, and RouterOS flaws enabling privilege escalation, code...

12 September 2026

AI exploitation

Claude Automates Large-Scale Cyberattacks

Threat actors used Claude and multi-agent frameworks to automate reconnaissance, exploitation, credential theft, and...

cyber espionage

Russian Hackers Automate Malware Evasion

State-sponsored hackers used Claude to automatically rebuild detected malware, helping implants evade security

active exploitation

GitLab CVSS 10 Flaw Probed

Attackers are probing a critical GitLab path traversal flaw that enables unauthenticated access to sensitive server

11 September 2026

AI security

LiteLLM Default Key Exposes AI Secrets

Nearly one in ten exposed LiteLLM gateways accepted an example admin key, exposing sensitive AI credentials.

AI exploitation

AI Agents Scale PaperCut Attacks

A suspected Russian-speaking attacker used hundreds of AI agents to rapidly compromise vulnerable PaperCut servers

banking malware

Gigabud Hides Behind Work Profiles

Android banking trojan uses work profiles to isolate malicious activity from banking applications’ malware

09 September 2026

crypto theft

Slim Spider Targets Crypto Custody

North Korean hackers target cryptocurrency custodians using fake Zoom meetings, ClickFix lures, and advanced

data exfiltration

ChatGPT Flaw Exposed Connected Gmail Data

A planted prompt could secretly read connected Gmail data and transfer it to an attacker-controlled ChatGPT account.

cryptocurrency vulnerability

Liquid Hackers Return 3,400 Bitcoin

Hackers returned 85% of stolen Liquid bitcoin after operators patched the underlying Elements software flaw.

06 September 2026

active exploitation

WordPress Flaws Face Massive Exploitation

Attackers launched over 440,000 attempts exploiting critical Super Forms and Elementor Pro flaws for remote code

software vulnerability

Plex Urges Immediate Security Updates

Plex patched multiple undisclosed security flaws and urges server and desktop users to update immediately.

zero-day exploitation

Chrome Zero-Day Exploited in Wild

Google patched an actively exploited V8 type confusion flaw enabling attackers to execute arbitrary code through

05 September 2026

Linux backdoor

Ted Backdoor Hijacks HAProxy Traffic

Trojanized HAProxy binaries intercept web traffic, execute commands, steal credentials, and conceal malicious activity

phishing evasion

Invisible Unicode Evades Email Filters

Attackers insert invisible Unicode characters into financial keywords, helping millions of phishing emails bypass

database vulnerability

PostgreSQL Flaw Enables Code Execution

A 12-year-old logical decoding flaw lets replication-role accounts execute code as the PostgreSQL operating...

01 September 2026

cyber espionage

Fire Ant Hijacks Cisco Routers

China-linked hackers compromise Cisco routers and authentication servers to steal credentials, capture traffic...

malware delivery

ValleyRAT Hides Inside Signed Adware

Silver Fox disguises ValleyRAT within legitimate signed adware, exploiting antivirus exclusions and DLL sideloading

ransomware activity

Aurora Ransomware Abuses Cursor AI

Aurora operators use Cursor’s AI features to generate malicious scripts and accelerate ransomware operations

30 August 2026

active exploitation

PaperCut Flaws Enable Unauthenticated RCE

Attackers chain two PaperCut vulnerabilities to bypass authentication and remotely execute arbitrary code on.

WordPress vulnerability

Critical WordPress Flaws Enable Takeovers

Five severe plugin and theme vulnerabilities enable administrator takeover, privilege escalation, and remote

ransomware extortion

Berlin Rejects Hackers’ Extortion Demand

Berlin refuses payment after attackers stole government data during an August compromise of its administrative

29 August 2026

robot vulnerability

Unitree Robot Flaws Enable Root RCE

Two G1 EDU vulnerabilities allow attackers to gain root execution through network access or nearby Bluetooth.

privacy security

Android 17 Hides Browsing Metadata

OS-wide Encrypted Client Hello protects website names from network observers across compatible Android

AI prompt injection

Snowflake GitHub Actions Exposed Secrets

Prompt injection in Snowflake’s GitHub workflow could expose repository secrets through attacker-controlled pull

28 August 2026

AI prompt injection

Amazon Kiro Prompt Injection Leaks Data

Malicious repository content can manipulate Kiro’s AI agent into accessing local information and silently sending it to...

remote code execution vulnerability

Next.js Flaws Enable Unauthenticated RCE

Critical AVIF image-processing and Windows path-traversal vulnerabilities can let remote attackers execute code on..

threat roundup

296K IoT Botnet Tops ThreatsDay

Weekly threats span a massive IoT botnet, critical water-system vulnerabilities, malware campaigns, and new AI

27 August 2026

phishing-as-a-service

NovaCookies Steals Microsoft 365 Session

Phishing-as-a-service abuses genuine Docusign notifications and real-time authentication proxies to steal Microsoft 365

nation-state cyber espionage

FBI Disrupts China-Linked QTFY Network

U.S. authorities seized infrastructure used by Chinese state-sponsored hackers to hide attacks against critical U.S.

cyber espionage

Nimbus Manticore Expands Espionage Arsenal

Iranian state-sponsored hackers add a TWOSTROKE-like backdoor and SSH tunneling tool to maintain stealthy

26 August 2026

authentication security

WhatsApp Adds Multiple Passkey Support

WhatsApp strengthens account security by allowing users to register multiple passkeys for passwordless

nation-state cyber threat

U.S. Sanctions Iran-Linked Infrastructure Hackers

U.S. sanctions target Iranian cyber actors accused of breaching energy, defense, healthcare, financial, and...

AI model poisoning

Malicious Webpages Can Poison Local AI

A browser-based attack can reach exposed Ollama instances behind NVIDIA NemoClaw and implant persistent

25 August 2026

account takeover

Keycloak Flaw Enables Account Takeover

Critical password-reset flaw lets unauthenticated attackers reset passwords and hijack any account, including

malware distribution

Fake Minecraft Clients Spread Weedhack

SEO poisoning and convincing fake gaming websites trick Minecraft players into downloading data-stealing malware.

malware loader

WordListLoader Delivers Amatera Through Steganography

New malware loader hides encrypted payloads inside images to evade detection and deploy Amatera information

24 August 2026

automotive malware

Android Malware Spreads Through Car Systems

New Android malware campaign abuses connected vehicle systems to spread infections and compromise paired

active exploitation

GitLab Flaw Exploited Within Days

Attackers rapidly exploit a critical GraphQL code-injection flaw to manipulate publicly accessible GitLab projects

critical vulnerability

Cisco Fixes Five CVSS 10 Flaws

Nine Crosswork and Secure Workload vulnerabilities expose enterprise networks to authentication bypass, injection, and

23 August 2026

security bypass

Defender’s Own Driver Can Kill Security

Researchers weaponized Microsoft Defender’s trusted boot driver to delete security software before Windows defenses

data privacy

TikTok Agrees to $400 Million Privacy Settlement

TikTok will pay $400 million to settle U.S. allegations that it illegally collected children's personal data and violated

software supply chain attack

Trojanized npm Packages Deploy AI-Powered Backdoor

Fourteen malicious npm packages secretly install RedC2 4.0, giving attackers advanced Linux control and AI-assisted

21 August 2026

AI prompt injection

Encrypted Prompts Can Steal Grok Chat Data

Cryptographic Context Injection hides malicious instructions inside encrypted content, bypassing AI filters and triggering

threat roundup

Gogs RCE Tops Weekly Cyber Threats

ThreatsDay highlights critical Gogs and n8n flaws alongside malware, supply-chain, cloud, and AI security risks.

AI-enabled ICS attack

AI-Generated Exploits Target Industrial PLCs

Attackers use AI-generated scripts to exploit exposed Siemens PLCs across U.S. critical infrastructure.

19 August 2026

data exposure

One Attacker Scrapes Salesforce and ServiceNow

City Forum campaign exploits overly permissive guest access to extract records from public-facing enterprise

AI prompt injection

AI Mind Viruses Spread Between Agents

Researchers show hidden prompt injections can propagate across connected AI agents and persist through shared

ransomware extortion

Ransom Busters Extorts Ransomware Victims Twice

Suspected ransomware affiliate claims to hack criminal servers, then charges existing victims up to $60,000 to

18 August 2026

botnet malware

Evooo1Bot Turns Edge Devices Into Proxies

Mirai-based Linux botnet exploits known vulnerabilities to hijack routers, cameras, and other edge devices as SOCKS5

AI security

MCP Servers Put Enterprise Secrets at Risk

Poorly secured MCP servers can expose API keys, credentials, and sensitive enterprise access through weak

mobile vulnerability

VoLTE Call Exploit Gains Android Kernel Access

Unisoc modem flaws can turn a malicious VoLTE video call into full Android kernel compromise.

16 August 2026

domain abuse

Hackers Spend $7 Million Buying Trust

Threat actors buy expired domains to inherit reputation and traffic, then redirect users to scams, gambling, and...

remote code execution vulnerability

SAP Commerce Cloud Flaw Enables RCE

Critical vulnerability could allow unauthenticated attackers to execute arbitrary code on vulnerable SAP Commerce...

privacy vulnerability

macOS Screen Sharing Exposes Sensitive Data

Apple Screen Sharing flaw can expose protected information during remote sessions despite macOS privacy...

15 August 2026

information stealer

AmnesiaStealer Hijacks Live Browser Sessions

macOS malware steals credentials and gives attackers interactive control of authenticated Chromium browser

cyber espionage

Mustang Panda Adds Signed Windows Rootkit

China-linked hackers enhance the CoolClient backdoor with a signed kernel rootkit that hides malicious activity from...

session hijacking

Chrome DevTools Enables Silent Session Hijacking

Attackers abuse Chrome DevTools capabilities to control authenticated browser sessions without stealing..

14 August 2026

mobile payment fraud

WindRelay Turns Phones Into Payment Proxies

Android malware relays live NFC card data to fraudsters for unauthorized contactless payments and cash withdrawals.

cyber espionage

PATCHCORD Targets Indian Critical Infrastructure

Pakistan-aligned hackers deploy new backdoors against Afghan telecom providers and Indian government, defense,

information stealer

AmnesiaStealer Hijacks Chromium Browsers

New information stealer targets Chromium browser data to capture credentials, cookies, and other sensitive

13 August 2026

critical vulnerability

Adobe Fixes Three CVSS 10.0 Flaws

Critical ColdFusion and Campaign Classic vulnerabilities could enable arbitrary code execution on vulnerable

zero-day exploitation

Lazarus Exploits Windows Zero-Day

North Korean hackers exploit a Windows privilege-escalation zero-day to gain SYSTEM access and deploy

AI data exposure

AI API Flaw Exposes Hidden Reasoning

Weaknesses in encrypted reasoning objects allowed weaker AI models to recover hidden reasoning and sensitive

12 August 2026

privilege escalation

USB Auto-Install Grants Windows SYSTEM Access

Researchers weaponized Windows Plug and Play to turn emulated USB devices into SYSTEM-level privilege

AI cybersecurity

OpenAI Launches GPT-5.6 Cyber

New cybersecurity-focused AI model strengthens defensive analysis while introducing additional safeguards against

mobile security vulnerability

Malicious SIM Cards Can Hijack Smartphones

Researchers show a modified SIM can abuse trusted cellular interfaces to execute attacker-controlled actions on...

11 August 2026

active exploitation

LoadMaster Flaw Faces 792 Exploit Attempts

Attackers actively exploit a critical Progress Kemp LoadMaster command-injection flaw to execute commands

ransomware activity

China-Linked Hackers Deploy StormEncryptor

Storm-1175 shifts from Medusa to new ransomware, likely exploiting N-central authentication bypass flaws for initial

AI-enabled cyber espionage

Kimsuky Builds Private AI Hacking Stack

North Korean hackers are running AI locally to improve phishing, analyze data, and automate parts of malware

10 August 2026

information stealer

ClickFix Malware Drains Mac Crypto Wallets

Social engineering tricks macOS users into running a stealer that targets credentials and cryptocurrency wallets.

AI prompt injection

Rovo Prompt Injection Leaks Enterprise Data

Malicious instructions can trick Atlassian Rovo into exfiltrating accessible Jira and Confluence data to attacker...

active exploitation

LoadMaster Flaw Added to CISA Exploited List

Attackers are actively exploiting a critical command-injection vulnerability affecting Progress Kemp LoadMaster

09 August 2026

active exploitation

N-central Attackers Reach Managed Systems

Attackers exploit N-central authentication bypass flaws to gain administrator access and establish persistence on..

webmail vulnerability

CSS Attacks Break Webmail Security Boundaries

New CSS techniques can escape email content boundaries to steal passwords, authentication tokens, and sensitive

zero-day exploitation

Metabase Zero-Day Grants Admin Access

Actively exploited CVSS 10.0 flaw lets unauthenticated attackers gain administrator access through SQL injection.

07 August 2026

critical infrastructure

Thousands of Rockwell PLCs Exposed Online

More than 4,400 internet-facing Rockwell PLCs increase the risk of attacks against industrial control systems.

network security update

Cisco Fixes 12 Critical Network Flaws

Security updates address high-severity vulnerabilities in Cisco SD-WAN and IOS XE networking platforms.

hardware vulnerability

Interrupt Injection Bypasses Spectre Defenses

CPU attack bypasses Spectre v2 protections, allowing local attackers to leak sensitive data.

06 August 2026

phishing-as-a-service

Kali365 Phishing Kit Targets Microsoft 365

New phishing platform abuses Microsoft's device authentication flow to bypass MFA and hijack enterprise

supply compromise

Trojanized npm Packages Hide C2 in Unicode

Malicious npm packages decode hidden command-and-control addresses from Unicode characters to evade

privilege escalation

OvsWrap Flaw Grants Linux Root Access

New Linux kernel vulnerability allows local attackers to gain root privileges through Open vSwitch.

05 August 2026

ransomware activity

INC Ransomware Becomes Top Threat

INC ransomware rapidly expands operations, surpassing other groups through aggressive double-extortion

web hosting vulnerability

cPanel Flaw Enables Server Compromise

Critical vulnerability could let attackers gain unauthorized control over vulnerable cPanel hosting servers.

supply compromise

Malicious npm Packages Deploy Cross-Platform Malware

Eighteen rogue npm packages spread malware that targets Windows, Linux, and macOS developers.

04 August 2026

malware evasion

Chinese Hackers Abuse Leaked Shellter Tool

China-linked attackers use a leaked commercial red-team framework to deploy stealthy malware and evade EDR.

password manager

Google Password Manager Passkeys Face Malware Risk

New attacks let Windows malware silently hijack passkey-protected accounts without user approval.

ransomware activity

INC Ransomware Becomes Top Threat

INC ransomware rapidly expands operations, surpassing other groups through aggressive double-extortion

02 August 2026

hardware security

Coldcard Wallet Flaw Exposes Seed Phrases

Researchers linked a hardware flaw to fault-injection attacks capable of extracting cryptocurrency wallet seed

cyber espionage

Chinese Hackers Target Financial Firms

Suspected Chinese-speaking attackers exploit trusted software and stealth techniques to infiltrate financial

remote code execution vulnerability

Adobe Fixes Critical Campaign Classic Flaw

CVSS 10.0 vulnerability could allow attackers to fully compromise Adobe Campaign Classic servers.

01 August 2026

browser security

Chrome Fixes 1,442 Security Flaws

Three recent Chrome releases patched a record number of vulnerabilities, most discovered through Google's internal

malware loader

HollowFrame Loader Delivers Matryoshka Malware

New malware loader uses layered evasion techniques to deploy Matryoshka payloads while avoiding security

supply chain compromise

Fake Android TV Boxes Spy on Users

Low-cost Android TV boxes masquerade as phones to install hidden apps, display ads, and steal user data.

31 July 2026

targeted phishing

Silver Fox Targets Japanese Manufacturer

China-linked attackers use tax-themed phishing to deploy stealthy malware against Japanese manufacturing

cloud vulnerability

CosmosEscape Exposes Azure Database Secrets

Critical Azure Cosmos DB flaw exposed platform-wide keys, risking cross-tenant database compromise.

watering-hole attack

AnySign4PC Exploited Through Trusted Websites

Hackers weaponize compromised Korean websites to silently install backdoors via vulnerable AnySign4PC

30 July 2026

critical infrastructure

Coordinated Cyberattack Hits Water Utilities

Attackers targeted over 30 water systems, disrupting operational technology and critical infrastructure services.

AI vulnerabilities

Ruflo MCP Flaw Enables Remote Code Execution

Unauthenticated MCP endpoints let attackers execute commands and poison AI agent memory.

virtualization vulnerability

VMware Flaws Threaten Virtual Infrastructure

Three critical vulnerabilities enable authentication bypass, remote code execution, and virtual machine escape.

28 July 2026

malware evasion

Cruciferra Hides Malware From EDR

Advanced crypter uses BYOVD and Process Ghosting to bypass Windows security and deploy malware.

sandbox escape

n8n Sandbox Escape Enables Host Access

Critical sandbox flaw lets workflow creators execute system commands beyond intended execution boundaries.

remote intrusion

BlueDash Deploys Level RMM Malware

Operation BlueDash abuses trusted remote management tools to gain persistent enterprise access.

27 July 2026

privilege escalation

Certighost Enables Full Domain Takeover

Public exploit lets low-privileged users impersonate domain controllers through Active Directory Certificate Services.

malvertising campaign

SourTrade Rebuilds Malware Inside Browsers

Malvertising campaign makes browsers assemble malware, bypassing traditional download-based security detection.

ransomware activity

DevMan Streamlines Ransomware Operations

Centralized affiliate portal automates payload creation, victim management, and ransomware profit sharing.

26 July 2026

ransomware activity

Cl0p Targets Exposed PTC Platforms

Cl0p affiliates exploit internet-facing Windchill and FlexPLM flaws for data theft and extortion.

zero-day exploitation

Fastjson Zero-Day Faces Active Exploitation

Attackers exploit critical Fastjson 1.x RCE flaw while affected applications remain without an official patch.

remote exploitation

GitLab RCE PoC Raises Attack Risk

Public exploit code increases the likelihood of real-world attacks against unpatched GitLab servers.

25 July 2026

identity protection

Aadhaar Copies Increase Identity Theft Risk

Kolkata Police warns hotel guests against sharing unmasked Aadhaar copies during check-ins.

AI vulnerabilities

AgentForger Creates Hidden AI Insiders

Patched ChatGPT flaw allowed phishing attacks to silently deploy attacker-controlled Workspace AI agents.

targeted phishing

BlueNoroff Profiles Victims Before Zoom Attacks

North Korean hackers use fake Zoom meetings and victim profiling to deploy targeted malware.

24 July 2026

ransomware activity

Chaos Ransomware Hides Behind MSRAT

Attackers route ransomware through MSRAT tunnels to evade detection and maintain covert access.

threat roundup

Android Spyware Tops Weekly Threats

Weekly roundup highlights Android spyware, PLC attacks, ransomware, and emerging enterprise cyber threats.

AI vulnerability

Claude Cowork Sandbox Escape Discovered

Sandbox flaw could let AI agents access host files beyond intended virtual machine boundaries.

23 July 2026

software vulnerability

7-Zip XZ Flaw Enables Code Execution

Crafted XZ archives can trigger remote code execution when opened in vulnerable 7-Zip versions.

cyber espionage

Russian Hackers Hijack NATO Security Cameras

Russian intelligence exploits exposed IP cameras to monitor NATO logistics and Ukrainian military movements.

exposure management

Exposure Window Drives Modern Cyber Risk

AI speeds vulnerability discovery, but slow remediation leaves organizations exposed to real attacks.

19 July 2026

regulatory compliance

EU Forces Android Voice Access

EU mandates broader microphone access to boost competition among voice assistants.

malware delivery

ClickFix Captchas Spread LAMEHUG Malware

UAC-0145 abuses fake CAPTCHA pages to infect Windows systems with LAMEHUG malware.

zero-day exploitation

SonicWall Zero-Days Under Active Attack

Attackers exploit SonicWall SMA zero-days to gain unauthorized access and compromise enterprise networks.

18 July 2026

supply compromise

Malicious Vite Packages Target Developers

Rogue npm packages steal credentials through fake Vite plugins and hidden malicious code.

web vulnerability

WP2Shell Exposes WordPress Core

Critical flaw enables remote code execution through vulnerable WordPress core installations.

denial-of-service vulnerability

HollowByte Silently Weakens OpenSSL Servers

Tiny TLS requests trigger persistent memory exhaustion without authentication or exploit code.

17 July 2026

cyber espionage

GoldenEyeDog Linked to New Espionage Campaign

China-linked subgroup uses stealthy malware and compromised infrastructure for targeted intelligence

supply chain attack

Fake Coding Tests Hide OtterCookie Malware

North Korean hackers conceal multi-stage malware inside SVG flag images in trojanized coding projects.

botnet malware

NadMesh Hunts Exposed AI Services

Botnet steals cloud keys, Kubernetes tokens, and credentials from misconfigured AI infrastructure.

16 July 2026

software vulnerability

n8n OAuth Flaw Risks Account Takeover

Token exchange vulnerability could let attackers hijack authenticated n8n workflow sessions.

cybercrime prosecution

Scattered Spider Members Sentenced

Two cybercriminals received prison terms for ransomware attacks and large-scale fraud.

threat roundup

Game Cheats Fuel New Cyber Threats

Weekly roundup highlights spyware, rapid ransomware, AI abuse, and supply-chain attacks.

15 July 2026

supply compromise

AsyncAPI npm Packages Backdoored

Compromised packages stole developer credentials and threatened software supply-chain security.

crypto malware

OkoBot Targets Crypto Wallet Recovery

Malware injects fake recovery phrases to hijack cryptocurrency wallets and steal digital assets.

security updates

Major Vendors Rush Critical Security Fixes

Firefox, Chrome, Adobe, and VMware release urgent patches for high-risk vulnerabilities.

14 July 2026

enterprise vulnerability

SAP Patches Critical NetWeaver Flaw

High-severity vulnerability could allow attackers to gain unauthorized access to SAP systems.

remote access trojan

Fake NVIDIA Tool Delivers LabubuRAT

Malware disguised as an NVIDIA utility installs a stealthy remote access trojan.

software vulnerability

RabbitMQ Flaws Expose OAuth Secrets

Critical vulnerabilities could leak OAuth credentials and compromise enterprise messaging systems.

13 July 2026

AI malware

AI-Generated Malware Evades Detection

Suspected AI-generated malware uses advanced obfuscation to bypass security tools and analysts.

fileless malware

MemGhost Hides Malware in Memory

New attack maintains persistent fileless access by storing malware directly in system memory.

AI security

Meta Seeks AI Fraud Detection Patent

New patent describes AI capable of identifying and preventing online fraud in real time.

12 July 2026

hardware security

Laser Attack Targets Crypto Wallets

Researchers reset hardware wallets using laser fault injection to bypass security protections.

supply compromise

Compromised npm Package Steals Secrets

Malicious Jscrambler release harvested developer credentials through a trusted package update.

malware delivery

Police Website Used to Spread Malware

Attackers weaponized a government website to distribute malware through trusted downloads.

11 July 2026

firmware vulnerability

U-Boot Flaws Threaten Embedded Devices

Six vulnerabilities enable attackers to bypass Secure Boot and compromise embedded systems.

email vulnerability

Critical Zimbra Flaw Enables Account Hijacking

Crafted emails can trigger remote code execution and compromise vulnerable Zimbra servers.

supply compromise

GitHub Breach Delivers Crypto Wallet Malware

Compromised Injective Labs repository pushed malicious updates targeting developer cryptocurrency wallets.

10 July 2026

account takeover

WhatsApp Flaw Enabled Account Takeover

Vulnerability chained WhatsApp and Microsoft 365 to compromise enterprise cloud accounts.

remote access trojan

ModBeaCon RAT Hides in gRPC Traffic

New remote access trojan uses gRPC streaming for stealthy command-and-control communications.

software vulnerability

xRing Flaw Enables Remote Code Execution

Unpatched XQUIC vulnerability allows attackers to execute code through crafted QUIC traffic.

09 July 2026

privilege escalation

Microsoft Fixes Defender Privilege Flaw

RoguePlanet vulnerability allowed attackers to gain SYSTEM privileges through Microsoft Defender.

threat roundup

Cloud Hijacking Dominates Weekly Threats

Threat roundup highlights cloud bucket abuse, AI attacks, ransomware, and supply-chain risks.

ransomware

GodDamn Ransomware Abuses Signed Driver

Attackers use PoisonX driver to disable defenses before encrypting enterprise systems.

07 July 2026

cybercrime investigation

Windows Device ID Helped Track Hacker

Court documents reveal Microsoft telemetry helped identify an alleged Scattered Spider member.

AI vulnerability

Rogue Agent Flaw Exposed GitHub Repositories

Critical GitHub Copilot flaw allowed MCP servers to access private repository data.

AI vulnerability

GitHub Issue Trick Targets Developers

Public GitHub issues can manipulate AI coding assistants into executing malicious instructions.

06 July 2026

software vulnerability

Gitea Docker Flaw Faces Active Probing

Attackers are scanning for vulnerable Gitea Docker instances to gain remote access.

cyber espionage

Fake File Converters Spread Espionage Malware

China-linked hackers use counterfeit converter websites to infect targeted Windows systems.

data exfiltration

rojPix Breaches Air-Gapped Networks

Image-based malware covertly steals data from isolated systems without network connectivity.

05 July 2026

supply compromise

Fake npm Packages Target Developers

North Korean packages impersonate Rollup tools to steal credentials and enable remote access.

linux vulnerability

Bad Epoll Flaw Grants Linux Root

New Linux kernel vulnerability enables local users to gain root privileges.

malware framework

Avalon Malware Framework Targets Enterprises

Modular malware framework enables stealthy persistence, credential theft, and remote command execution.

04 July 2026

cyber extortion

U.S. Paid Million-Dollar Extortion Demand

Government entity paid attackers to prevent publication of stolen sensitive data.

supply compromise

North Korea Expands Supply Chain Attacks

Malicious packages and extensions target developers across multiple software ecosystems.

embedded vulnerability

Embedded Filesystem Bugs Threaten Millions

Unpatched FatFs flaws expose embedded devices to memory corruption and code execution.

03 July 2026

MacOS malware

PamStealer Targets Apple Silicon Macs

Fake Maccy sites deliver stealthy infostealer validating stolen passwords before data theft.

Cyber espionage

Armored Likho Targets Government Networks

Advanced malware campaign strengthens persistence and espionage against government organizations.

Cyber espionage

Pegasus Spyware Hits EU Investigator

European lawmaker probing spyware abuses became a Pegasus surveillance target.

02 July 2026

Threat roundup

AI Compute Hijacking Leads Weekly Threats

Weekly bulletin highlights AI abuse, Apple flaw, ransomware, and emerging attack techniques.

Cyber espionage

Gmail OAuth Attack Evades Authentication

ToddyCat malware abuses OAuth to silently hijack Gmail accounts through trusted browser sessions.

AI exploitation

AI Agent Exploits Langflow Automatically

Autonomous agent chained Langflow flaw into full server compromise without human intervention.

01 July 2026

AI vulnerability

Cursor Flaws Enable Prompt Injection Attacks

Critical vulnerabilities let prompt injections execute malicious actions and expose developer environments.

Banking malware

Ousaban Targets Iberian Banking Users

Brazilian banking trojan uses stealthy phishing and geofencing to hijack financial accounts.

Software update

Adobe Fixes Critical Commerce Flaws

Seven maximum-severity vulnerabilities could enable remote code execution on Commerce servers.

30 June 2026

AI security

Hundreds Of iOS Apps Leak AI Keys

Researchers found widespread LLM credential exposure across AI-powered iOS applications.

Crypto malware

Langflow Flaw Powers Crypto Mining

Attackers exploit Langflow vulnerability to deploy Monero miners on exposed AI servers.

Crypto malware

Fake CAPTCHA Spreads Crypto Clipper

Silent Swap campaign hijacks clipboard wallets through deceptive verification pages.

29 June 2026

Scam infrastructure

Scam Network Exploits Uni-App Framework

Over 236,000 fraudulent sites abused a legitimate framework to power global scams.

Cyber espionage

Gamaredon Expands Ukraine Cyber Campaigns

Russian APT enhances malware, phishing, and cloud abuse against Ukrainian government targets.

malware loader

SharkLoader Deploys Cobalt Strike

New loader exploits public flaws to compromise governments and enterprise networks.

28 June 2026

AI vulnerability

Amazon Q Flaw Exposes Cloud Credentials

Malicious repositories executed code and stole developer credentials through AI workspace configuration.

cyber espionage

Russian Smishing Campaign Targets Officials

Fake support messages steal messaging credentials from government and military personnel.

malware loader

SharkLoader Deploys Cobalt Strike

New loader exploits public flaws to compromise governments and enterprise networks.

27 June 2026

Software vulnerability

CISA Flags Exploited PTC Flaw

Active attacks prompted urgent patching of critical Windchill remote code execution vulnerability.

AI regulation

OpenAI Restricts GPT-5.6 Rollout

Government-requested limits delay public access to advanced AI cybersecurity capabilities.

Cyber espionage

FBI Warns Signal Backup Keys Targeted

Russian hackers steal Signal recovery keys to hijack encrypted messaging accounts.

26 June 2026

Cyber espionage

Chinese APT Unleashes New Backdoor

New malware maintains stealthy persistence across compromised enterprise and government networks.

Linux vulnerability

Linux Kernel Flaw Grants Root Access

New Pedit COW exploit enables local privilege escalation through cached binary poisoning.

Network vulnerability

Cisco Zero-Day Granted Root Access

Attackers chained Cisco SD-WAN vulnerabilities to obtain persistent root-level access.

25 June 2026

Supply compromise

Popular Ad Blocker Turned Malicious

Compromised Chrome extension secretly hijacked browsers and redirected millions of user requests.

Ransomware access

Stealthy Backdoor Aids Ransomware Access

Mistic backdoor strengthens initial access for ransomware groups through stealthy enterprise intrusions.

AI malware

AI-Evading Malware Targets macOS

Gaslight malware uses prompt injection to disrupt AI-assisted malware analysis and detection.

24 June 2026

Network compromise

FortiBleed Exposes Thousands Of Firewalls

Massive campaign leaked working FortiGate credentials, enabling global firewall compromise risks.

Cybercrime disruption

DoJ Strikes Major Cybercrime Marketplace

U.S. seized Huione infrastructure used to launder billions from scams and cybercrime.

Supply vulnerability

CI/CD Flaws Expose Hundreds Of Repositories

Cordyceps vulnerabilities allow attackers to hijack workflows and compromise software supply chains.

23 June 2026

Malware delivery

Fake Office Files Spread Malware

WhatsApp campaign delivers VBScript malware through deceptive Office document attachments.

Supply security

GitHub Blocks Workflow Supply Attacks

Updated Actions checkout mitigates malicious branch and workflow manipulation techniques.

AI exploitation

Autonomous AI Removes Human Bottlenecks

Agentic AI enables attacks with minimal human input, accelerating cyber operations.

22 June 2026

IoT malware

Legacy Routers Become Stealth Recon Nodes

AryStinger malware hijacks old routers for scanning, proxying, and attacker concealment.

Malware delivery

Malicious SVG Files Deliver OxLoader

New OxLoader campaign abuses SVG images to deploy malware and evade detection.

Mobile security

Google Tightens Android App Trust

Unverified developers face installation blocks across millions of Android devices.

21 June 2026

software update

Apple Fixes Wireless Eavesdropping Risk

Beats Studio Buds flaw enabled nearby attackers to access audio streams and pairing.

Software vulnerability

F5 Fixes Critical NGINX Flaws

Severe vulnerabilities expose NGINX environments to denial-of-service and memory corruption risks.

hardware vulnerability

USB Exploit Bypasses Modern Defenses

Unpatchable USB attack breaks isolation protections and enables stealthy hardware compromise.

20 June 2026

Supply compromise

North Korea Hits AI Supply Chain

Sapphire Sleet compromised Mastra packages to steal developer secrets and crypto wallets.

Software vulnerability

WordPress SMTP Flaw Under Attack

Active exploitation exposes email credentials and sensitive configuration data on websites.

Supply compromise

Klue Breach Hits Security Firms

Supply-chain compromise exposed customer data from cybersecurity companies using Klue platforms.

19 June 2026

AI security

Agentic AI Reshapes Cyber Operations

Autonomous AI links intelligence, validation, and response into continuous security workflows.

Network vulnerability

CISA Urges Fortinet Emergency Patching

Active exploitation forces immediate action against critical Fortinet vulnerabilities affecting enterprises.

Malware disruption

Operation Endgame Hits Malware Networks

Global operation disrupted SocGholish infrastructure and weakened major cybercrime ecosystems.

18 June 2026

AI security

Hidden AI Agents Create Access Risks

Orphaned AI agents retain privileges, exposing sensitive systems and data to misuse.

threat roundup

Trusted Platforms Become Attack Vectors

AI chats, npm packages, and phishing campaigns abused legitimate services for attacks.

crypto malware

Clipboard Malware Steals Crypto Funds

Windows Clipper malware hijacks copied wallet addresses to redirect cryptocurrency payments.

17 June 2026

Software vulnerability

Joomla Flaw Under Active Attack

CISA warns attackers are exploiting critical Joomla JCE vulnerability enabling remote code execution.

Supply compromise

Malicious JetBrains Plugins Steal AI Keys

Fake AI coding plugins exfiltrate developer API keys from trusted IDE environments.

supply compromise

144 NPM Packages Backdoored

Supply-chain attack compromised AI framework packages, exposing developers and production environments.

16 June 2026

Mobile malware

New Android Malware Targets Banking Data

RokaRolla steals credentials, financial information, and device data from Android users.

Threat intelligence

Hidden Infrastructure Powers Most Attacks

Survey found anonymized infrastructure enables attackers while defenders remain largely reactive.

Network vulnerability

Fortinet Flaws Fuel Active Attacks

Attackers exploit multiple Fortinet vulnerabilities to gain access and compromise networks.

15 June 2026

Software vulnerability

Decade-Old phpBB Flaw Fixed

Authentication bypass vulnerability remained hidden for years, exposing forum accounts to compromise.

Phishing scam

Fake Facebook Offers Fuel Scams

Fraudsters impersonate trusted entities to steal credentials from MENA region users.

Network vulnerability

Palo Alto Flaw Under Active Attack

Exploited PAN-OS vulnerability allows unauthorized VPN access to enterprise networks.

14 June 2026

Phishing disruption

FBI Disrupts Massive AI Phishing Network

Authorities dismantled AI-powered phishing infrastructure linked to over one million malicious URLs.

insider threat

Insider Hacker Sentenced To Prison

Former employee jailed after cyberattacks disrupted school district systems and operations.

privacy concern

Meta Expands Biometric Tracking Ambitions

Meta explores facial recognition capabilities, raising privacy and surveillance concerns globally.

13 June 2026

AI regulation

U.S. Halts Access To Advanced AI

Government ordered Anthropic to suspend powerful AI models for foreign nationals worldwide.

software vulnerability

Splunk Flaw Enables Code Execution

Low-privileged users can gain remote code execution through vulnerable Splunk components.

supply compromise

Arch Repository Hit By Massive Supply Chain Attack

Over 400 AUR packages distributed malware stealing credentials and compromising Linux systems.

12 June 2026

phishing disruption

INTERPOL Dismantles Major Phishing Platform

Global operation shut down SniperDz infrastructure and arrested its alleged developer.

AI security

AgentJacking Turns AI Into Attackers

New attack hijacks coding agents into executing malicious commands through trusted error reports.

security strategy

MDR Evolves For AI-Powered Threats

Security providers shift MDR beyond detection toward prevention, automation, and resilience.

11 June 2026

supply security

GitHub Blocks Risky NPM Script Execution

npm will require explicit approval before running install scripts commonly abused in attacks.

ransomware activity

Ransomware Gang Claims Hundreds Victims

The Gentlemen ransomware operation reported widespread attacks across multiple industries worldwide.

cyber espionage

OceanLotus Targets Vietnamese Investors

State-linked hackers deployed malware through investment-themed lures targeting financial communities.

10 June 2026

cyber espionage

Chinese Botnet Expands Military Targeting

JDY botnet grew rapidly, focusing reconnaissance against military and critical infrastructure networks.

software update

Critical Enterprise Flaws Patched

Ivanti, Fortinet, and SAP released fixes for high-risk vulnerabilities affecting enterprises.

AI vulnerability

Langflow Flaw Enables Full Takeover

Unpatched vulnerability allows remote code execution and complete compromise of AI workflows.

09 June 2026

cyber espionage

WinRAR Flaw Fuels Russian Espionage

Russia-aligned groups exploit patched WinRAR vulnerability to deploy malware against Ukrainian targets.

backup vulnerability

Veeam Backup Servers Face Critical RCE

Authenticated domain users can execute code on vulnerable backup infrastructure.

supply compromise

Microsoft Supply Chain Breach Hits AI Developers

Compromised repositories delivered credential-stealing malware through trusted Microsoft developer tools.

08 June 2026

cyber espionage

Linux Malware Expands Beyond Linux

Chinese-linked hackers deployed BSD malware variant to broaden stealthy cross-platform espionage operations.

cyber extortion

Hackers Blend Vishing With Physical Intrusions

UNC3753 used fake IT support calls and onsite visits for rapid data theft.

network vulnerability

Check Point VPN Flaw Under Attack

Attackers actively exploit critical VPN vulnerability to gain unauthorized network access.

07 June 2026

account security

Instagram Flaw Exposed Account Recovery

AI-assisted recovery weakness enabled unauthorized password reset and account takeover attempts.

mobile spyware

Android Spyware Targets Arabic Communities

Asin spyware spreads through fake apps targeting journalists and researchers in Arabic regions.

AI security

ChatGPT Adds High-Security Lockdown Mode

New mode limits risky features to reduce prompt injection and data theft.

06 June 2026

security tooling

OWASP Launches Developer Security Scanner

CVE Lite CLI helps developers detect and remediate dependency vulnerabilities before deployment.

AI security

AI Agent Finds 21 Zero-Days

Autonomous AI uncovered 21 vulnerabilities across widely used open-source software projects.

software vulnerability

CISA Flags Exploited SolarWinds Flaw

Active attacks prompted CISA to prioritize immediate patching of critical SolarWinds vulnerabilities.

05 June 2026

software vulnerability

Laravel Email Validation Flaw Disclosed

CRLF injection bug enables outbound email manipulation and potential mail relay abuse.

linux vulnerability

Linux CIFSwitch Flaw Grants Root

Kernel vulnerability enables local users to escalate privileges and obtain root access.

AI development

Google Challenges AI Coding Leaders

Antigravity 2.0 introduces autonomous coding agents competing directly with Claude and Codex.

04 June 2026

AI security

Agentic AI Reshapes Cyber Defense

Autonomous AI boosts security operations but introduces governance, trust, and control risks.

vulnerability management

Cisco Accelerates Vulnerability Disclosures

AI-driven bug discovery forces faster disclosures and proactive security response strategies.

AI regulation

U.S. Advances AI Regulation Effort

Lawmakers proposed framework governing AI safety, transparency, accountability, and national security.

03 June 2026

malware delivery

Google Domain Abused For Malware Delivery

Attackers leveraged DoubleClick redirects to evade detection and deploy remote access malware.

AI security

AI Unearths Hidden RCE Flaw

Autonomous AI discovered a two-year-old remote code execution vulnerability missed by researchers.

windows vulnerability

Windows Flaw Leaks Authentication Hashes

Unpatched Windows Search URI bug exposes NTLMv2 hashes through malicious link interactions.

02 June 2026

security strategy

EDR Alone Is No Longer Enough

Organizations combine hardening and MDR to improve resilience against AI-powered attacks.

AI exploitation

AI Shrinks Exploitation Timelines Dramatically

AI accelerates vulnerability weaponization, reducing defenders’ remediation windows from days to hours.

cyber espionage

SideCopy Expands Regional Espionage Campaign

Pakistan-linked hackers targeted Afghan finance entities using phishing and Xeno RAT malware.

01 June 2026

cybersecurity recap

Cyber Threats Escalate Across Platforms

Linux flaws, PAN-OS exploits, AI attacks, and phishing campaigns intensified globally.

cyber espionage

China-Linked Cyberattacks Intensify Globally

Chinese-aligned groups expanded espionage campaigns targeting governments, infrastructure, and strategic

security business

MSP Security Market Expands Rapidly

Rising cyber threats drive MSP adoption, identity security growth, and AI-powered protection.