credential

June 17, 2026

Rokarolla: zLabs Uncovers Sophisticated Android Banking Trojan

Cybersecurity researchers have uncovered a highly capable Android banking trojan dubbed Rokarolla—a name derived directly from its Command-and-Control (C2) infrastructure.…
Read More »
June 17, 2026

Trojanized Wallpapers: How Attackers are Weaponizing Steam Workshop via Wallpaper Engine

A sophisticated cyberattack campaign has been identified leveraging the Steam Workshop’s community-driven sharing model to distribute a diverse array of…
Read More »
June 17, 2026

27-Year Authentication Bypass and Kernel Heap Over-read Fixed in OpenBSD’s PPP Stack

A critical architectural flaw has been identified within the OpenBSD Point-to-Point Protocol (PPP) stack, specifically targeting the Password Authentication Protocol…
Read More »
June 16, 2026

Advanced Phishing Evolution: UNC1151 Targets Gmail with Real-Time 2FA Interception

The threat actor known as Ghostwriter (UNC1151) has significantly upgraded its operational capabilities, moving beyond localized phishing to execute sophisticated,…
Read More »
June 16, 2026

Supply Chain Attack on WordPress Ecosystem: How a CDN Compromise Exposed 1.2 Million Sites

A sophisticated supply chain attack has struck the WordPress ecosystem, targeting the widely used OptinMonster plugin and exposing over 1.2…
Read More »
June 15, 2026

Critical Alert: Active Exploitation of Jenkins RCE Vulnerability (CVE-2026-53435) via Insecure Deserialization

A critical Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-53435, is currently being leveraged in active, real-world cyberattacks targeting Jenkins…
Read More »
June 15, 2026

Velvet Ant: Surgical Subversion of Critical Infrastructure Authentication Stacks (PAM and OpenSSH)

In a sophisticated display of cyber-persistence, the China-nexus threat actor known as Velvet Ant has been unmasked for executing a…
Read More »
June 15, 2026

The Anatomy of SearchJack: Exploiting Chrome Settings for Large-Scale Affiliate Revenue

A sophisticated, coordinated campaign involving 23 seemingly benign Chrome extensions—tracked under the moniker “SearchJack”—has successfully compromised the default search configurations…
Read More »
June 15, 2026

The Credential History Chain: How DPAPISnoop Unlocks Offline Password Cracking

The landscape of Windows credential theft is shifting from simple secret recovery to a more nuanced analysis of user authentication…
Read More »
June 15, 2026

Russia-Aligned Threats Target Ukraine via WinRAR: The Evolution of SHADOW-EARTH-066

Despite being addressed in the July 2025 patch cycle, CVE-2025-8088 remains a highly effective initial access vector. Current intelligence suggests…
Read More »
June 12, 2026

CVE-2026-20253: Analyzing the Critical Pre-Auth RCE Chain in Splunk Enterprise

A high-severity security flaw has been identified in Splunk Enterprise, presenting a critical risk to data integrity and system availability.…
Read More »
June 12, 2026

Edge-Centric Warfare: APT28’s Strategic Pivot to Botnet-Powered Proxy Infrastructure

A significant operational evolution has been observed within the GRU-linked intrusion set APT28 (alternatively identified as Fancy Bear, Sofacy, Forest…
Read More »
June 12, 2026

Supply Chain Warfare: Advanced Typosquatting Targets Web3 Development Ecosystems

Threat actors are increasingly weaponizing the inherent trust placed in open-source dependencies to target Web3 engineering teams. By deploying sophisticated…
Read More »
June 12, 2026

Automating Discovery: How AI-Driven Fuzzing Unlocked $500,000 in Google Bug Bounties

In a landmark demonstration of automated vulnerability research, security researcher Arvin Shivram has secured $500,000 in bounties from Google’s Vulnerability…
Read More »
June 11, 2026

Critical Security Advisory: GitLab Releases Essential Patches to Mitigate Account Takeover and XSS Risks

GitLab has issued a critical security update for both Community Edition (CE) and Enterprise Edition (EE), addressing a series of…
Read More »
June 10, 2026

Mass Repository Takedown: Analyzing the GitHub Enforcement Wave Against Microsoft Organizations

In a highly compressed window of just 105 seconds, GitHub executed a sweeping enforcement action, disabling 73 repositories distributed across…
Read More »
June 10, 2026

The New Phishing Frontier: How Autonomous AI Agents Fall Victim to Social Engineering

As enterprises move toward integrating autonomous AI agents into core business workflows, a critical security vulnerability has emerged: these agents…
Read More »
June 10, 2026

Critical Remote Code Execution Flaw Uncovered in Veeam Backup & Replication

A high-severity Remote Code Execution (RCE) vulnerability has been identified within the Veeam Backup & Replication ecosystem, presenting a significant…
Read More »
June 9, 2026

Deconstructing the BitB Phishing Evolution: High-Fidelity OAuth Impersonation

A sophisticated new wave of Browser-in-the-Browser (BitB) phishing is currently targeting Microsoft 365 users. Unlike traditional phishing sites that rely…
Read More »
June 9, 2026

Deepening Endpoint Visibility: Microsoft Defender’s New RPC Function-Level Monitoring

Microsoft has announced a significant evolution in its threat detection capabilities within Microsoft Defender for Endpoint. By shifting from high-level…
Read More »

Previous page Next page