Cybersecurity News

March 27, 2026

Windows Error Reporting Vulnerability Exposes Systems to Privilege Escalation, Allowing SYSTEM Access

Microsoft recently patched a severe Elevation of Privilege (EoP) vulnerability in the Windows Error Reporting (WER) service, officially tracked as CVE-2026-20817. This flaw allows a local attacker with standard user…
Read More »
March 27, 2026

Hackers Deploy USB Malware, RATs, and Stealers in Southeast Asian Government Attacks

A multi-cluster cyberespionage operation in which attackers used USB-propagated malware, multiple RATs, loaders, and a custom stealer to target a Southeast Asian government organization between June and August 2025. Analysts…
Read More »
March 27, 2026

Silver Fox Cyberattack Targets Japanese Businesses with Tax-Themed Phishing Scams

A threat actor known as Silver Fox is targeting Japanese organizations with a new wave of spearphishing attacks timed to coincide with the country’s busy tax-filing and corporate restructuring season.…
Read More »
March 27, 2026

CISA Adds Critical Aquasecurity Trivy Scanner Vulnerability to KEV Catalog

CISA has urgently added a critical flaw affecting Aquasecurity’s Trivy scanner to its Known Exploited Vulnerabilities (KEV) catalog under tracking identifier CVE-2026-33634. This security weakness involves embedded malicious code specifically…
Read More »
March 27, 2026

BIND 9 Security Flaws Allow Attackers to Bypass Security Controls and Crash Servers

The Internet Systems Consortium (ISC) has released critical security advisories addressing three new vulnerabilities in the widely used BIND 9 Domain Name System (DNS) software suite. If left unpatched, remote…
Read More »
March 26, 2026

Critical Ivanti EPMM Vulnerabilities Expose Systems to Arbitrary Code Execution Attacks

In February 2026, threat actors actively exploited two critical remote code execution (RCE) vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM). A recent incident response investigation by WithSecure’s STINGR Group revealed…
Read More »
March 26, 2026

CISA Issues Urgent Warning on Langflow Code Injection Vulnerability Actively Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical code-injection vulnerability discovered within Langflow. Tracked as CVE-2026-33017, this severe security flaw has been officially…
Read More »
March 26, 2026

VoidLink Rootkit Leverages eBPF and Kernel Modules to Stealthily Infiltrate Linux Systems

VoidLink is a new Linux rootkit family that combines classic kernel modules with eBPF to hide processes and network activity deep inside modern cloud environments. It targets distributions from CentOS…
Read More »
March 26, 2026

Leak Bazaar Converts Stolen Corporate Data Into Organized Criminal Marketplace

A new cybercriminal service named “Leak Bazaar” has emerged on the Russian-speaking TierOne forum, advertised by user Snow of SnowTeam on March 25, 2026. Unlike conventional data leak sites, Leak…
Read More »
March 26, 2026

New ClickFix Attack Exploits Windows Run Dialog and macOS Terminal to Deploy Malware

Threat actors are standardizing a powerful ClickFix-based attack that abuses the Windows Run dialog box and macOS Terminal to deliver malware while sidestepping traditional browser protections. Insikt Group has tracked…
Read More »
March 26, 2026

GhostClaw AI Malware Targets macOS Users with Credential-Stealing Payloads

GhostClaw, a multi-stage macOS infostealer, now exploits both GitHub repositories and AI-assisted development workflows to steal credentials and deploy secondary payloads, significantly broadening its attack surface against users. Jamf Threat…
Read More »
March 26, 2026

Fake Screenshot Lures Target Web3 Support Staff with Multi-Stage Malware Attack

A campaign attributed to APT-Q-27 (GoldenEyeDog), a Chinese group targeting Web3, is leveraging deceptive fake screenshot links delivered through support chat workflows to deploy a multi-stage, memory-resident Farfli backdoor. The…
Read More »
March 25, 2026

Mozilla Releases Firefox 149.0 With Free Built‑In VPN Offering 50 GB Monthly Data

Mozilla has launched Firefox 149.0 on the Release channel, introducing a comprehensive suite of privacy and security upgrades to the browser. The most notable addition is a free, integrated VPN…
Read More »
March 25, 2026

Microsoft Unveils New Guidance to Detect and Defend Against Trivy Supply Chain Attack

Aqua Security’s vulnerability scanner, Trivy, faced a sophisticated CI/CD supply chain compromise. The threat actor, identified as TeamPCP, exploited prior incomplete remediation to inject credential-stealing malware into official releases. This…
Read More »
March 25, 2026

Obfuscated VBS and PNG Loaders Power New Open Directory Malware Campaign with RAT Payloads

A sophisticated, multi-stage delivery mechanism utilizing obfuscated Visual Basic Script (VBS) files, fileless PowerShell loaders, and payloads concealed within PNG images. The activity was initially detected by LevelBlue’s Managed Detection…
Read More »
March 25, 2026

China-Backed Hackers Target Southeast Asian Military Systems in Ongoing Spy Campaign

China-linked threat actors have been identified targeting Southeast Asian military networks in a long-running cyber espionage campaign focused on intelligence collection and operational surveillance. The activity, tracked as CL-STA-1087, demonstrates…
Read More »
March 25, 2026

Mirai Botnets Evolve Into Major DDoS and Proxy Abuse Threats

Mirai-based botnets have evolved from simple IoT malware into large-scale DDoS and proxy abuse platforms underpinning record-breaking attacks and stealthy cybercrime operations. Over 21,000 C2 servers were observed from July…
Read More »
March 25, 2026

Critical Magento Vulnerability Actively Exploited Across Thousands of Stores

A critical vulnerability called “PolyShell” is being actively exploited on Magento and Adobe Commerce platforms, putting thousands of online stores at immediate risk. The Sansec Forensics Team discovered the flaw…
Read More »
March 25, 2026

New Study Reveals How Infostealer Infections Lead to Dark Web Exposure in Just 48 Hours

New research highlights how infostealer malware can rapidly convert a single careless click into full credential exposure on dark web marketplaces within just 48 hours, significantly faster than traditional breach…
Read More »
March 25, 2026

Five Malicious npm Packages Target Crypto Developers, Steal Wallet Keys via Telegram

Five malicious npm packages impersonating popular crypto libraries are stealing wallet keys from Solana and Ethereum developers and exfiltrating them directly to a hardcoded Telegram bot. Each package typosquats or…
Read More »

Previous page Next page