data

June 26, 2026

Counterfeit USB Drives with China-Linked Malware Compromise Japan’s Defense Forces

Japan’s national defense posture has encountered a significant security setback following investigations into the procurement and deployment of unauthorized hardware.…
Read More »
June 26, 2026

CVE-2026-28496: Critical SSTI Vulnerability in FOSSBilling Poses Imminent Risk of RCE and Database Compromise

A high-severity Server-Side Template Injection (SSTI) vulnerability has been identified in FOSSBilling, tracked as CVE-2026-28496. This flaw allows for potential…
Read More »
June 26, 2026

Technical Analysis: Advanced Reflective Loading via WinRAR Path Traversal (CVE-2025-8088)

Threat actors have evolved their exploitation capabilities by weaponizing a critical WinRAR path-traversal vulnerability, tracked as CVE-2025-8088. This campaign utilizes…
Read More »
June 26, 2026

The Phantom Order: How Fake Receipts in the Shop App Are Driving Vishing Attacks

Cybersecurity landscapes are shifting from external delivery methods, like traditional phishing emails, to sophisticated in-app social engineering. Recently, threat actors…
Read More »
June 26, 2026

Digital Repression: How Russian Authorities Breached an Activist’s iPhone

A technical investigation into the digital footprint of detained human rights activist Andrey Pivovarov has uncovered evidence that Russian state…
Read More »
June 26, 2026

The Evolution of k0to: From KuinaExtractor Prototype to Hardened Rust-Based Infostealer

Security researchers have identified a sophisticated lineage of Rust-based malware, originally operating under the moniker KuinaExtractor and recently rebranded…
Read More »
June 26, 2026

Unmasking CL-STA-1062: The Stealthy Threat Targeting Southeast Asian Infrastructure

During 2025, a Chinese-speaking threat actor, tracked as CL-STA-1062, significantly escalated its regional operations. Targeting government entities and critical energy…
Read More »
June 26, 2026

Critical Escalation: CISA Flags Actively Exploited SSRF Vulnerability in Cisco Unified Communications Manager

The Cybersecurity and Infrastructure Security Agency (CISA) has officially updated its Known Exploited Vulnerabilities (KEV) catalog to include a critical…
Read More »
June 26, 2026

Threat Intelligence Report: Mini Shai-Hulud, Miasma, and Hades Malware Targeting Developer Ecosystems

A sophisticated new wave of supply-chain attacks—driven by the Mini Shai-Hulud, Miasma, and Hades malware families—is currently targeting the npm…
Read More »
June 25, 2026

Critical Vulnerability Alert: Predictable SSO Token Generation in ManageEngine AD360 Leads to Account Takeover

A critical security flaw has been identified within ManageEngine’s AD360 identity and access management (IAM) suite, designated as CVE-2026-11374. This…
Read More »
June 25, 2026

The Evolution of LokiBot: Deep Dive into Modern Evasion and Injection Techniques

LokiBot is no stranger to the threat landscape. First surfacing in underground forums around May 2015 via vendors known as…
Read More »
June 25, 2026

The curl Project Deploys Version 8.21.0 to Address 18 Vulnerabilities

The curl project has officially deployed version 8.21.0, marking its 275th milestone release. While version increments often signal incremental feature…
Read More »
June 25, 2026

Supply Chain Alert: Shai-Hulud/Hades Malware Targets Leo/RStreams Ecosystem

A sophisticated supply-chain attack has been identified targeting the Leo/RStreams ecosystem, an AWS-native event streaming SDK frequently utilized in Kinesis,…
Read More »
June 25, 2026

Analyzing macOS.Gaslight: A Sophisticated Rust-Based Implant Targeting Analyst Workflows

Threat researchers have identified a sophisticated new macOS implant, tracked as macOS.Gaslight. Built using the Rust programming language, this malware…
Read More »
June 25, 2026

Critical Security Patch: Google Chrome Addresses Multiple Memory Safety Vulnerabilities

Google has officially deployed a critical security update for the Chrome browser, releasing versions 149.0.7827.196/197 for Windows and macOS, and…
Read More »
June 25, 2026

Dismantling the Cybercrime Assembly Line: Inside Operation Endgame’s Infrastructure Takedown

In a massive synchronized strike against the digital underworld, Europol—working in tandem with a global coalition of law enforcement agencies…
Read More »
June 25, 2026

Unveiling StrikeShark: Deep Dive into the SharkLoader Infection Chain

During a recent forensic investigation into cyber activity targeting a diplomatic mission in Indonesia, security researchers identified a previously undocumented…
Read More »
June 25, 2026

The Intersection of WinRE and UEFI: Analyzing CVE-2026-45585

A critical architectural weakness has been identified within the Microsoft Windows Recovery Environment (WinRE), potentially allowing sophisticated actors to circumvent…
Read More »
June 25, 2026

Anthropic Accuses Alibaba of Orchestrating Massive AI Model Theft Campaign

In a significant escalation of the ongoing tension between Western AI developers and global competitors, Anthropic has formally accused the…
Read More »
June 24, 2026

Post-Mortem: Analyzing the TanStack NPM Supply Chain Attack on Grafana Labs

Grafana Labs has officially disclosed a sophisticated supply chain attack targeting the TanStack npm ecosystem, which ultimately led to the…
Read More »

Previous page Next page