malicious
-
Critical FortiSandbox Vulnerability CVE-2026-39808: Public Exploit Now Available
A proof-of-concept (PoC) exploit has been publicly released for a critical security flaw in Fortinet’s FortiSandbox, putting thousands of networks…
Read More » -
Sapphire Sleet’s Fake Zoom SDK Preys on macOS Users Through Social Engineering
A sophisticated cyber campaign orchestrated by North Korean threat actor Sapphire Sleet reveals a significant shift toward social engineering over…
Read More » -
ATHR: Integrated Telephony-Based Attack Infrastructure and AI-Driven Voice Social Engineering in TOAD Attack Campaigns
Cybercriminal threat actors are increasingly leveraging telephone-oriented attack delivery (TOAD) methodologies to circumvent conventional email security infrastructure. This trend is…
Read More » -
Ukrainian Authorities Warn of Surge in Targeted Cyberattacks on Government and Healthcare by UAC-0247
A significant surge in cyberattacks has been detected targeting Ukrainian local governments and municipal healthcare institutions, particularly clinical and ambulance…
Read More » -
RedSun Exploit Published: Security Researcher Confronts MSRC on CVE-2026-33825
A security researcher operating under the alias “Chaotic Eclipse” has publicly disclosed a proof-of-concept (PoC) exploit targeting a vulnerability within…
Read More » -
Splunk Rattles with High-Severity Flaw Enabling Remote Server Takeover (CVE-2026-20204)
Splunk has issued a security advisory for a critical vulnerability affecting its Enterprise and Cloud Platform environments. Tracked as CVE-2026-20204…
Read More » -
Attackers Weaponize Google Cloud Storage to Deliver Remcos RAT Through Phishing Campaigns
Cybercriminals are increasingly leveraging Google Cloud Storage infrastructure to circumvent email and web content filters, deploying Remcos Remote Access Trojan…
Read More » -
Massive WordPress Supply Chain Attack: 30+ Plugins Compromised in Silent Backdoor Operation
A sophisticated supply chain attack targeting WordPress users lay dormant for nearly eight months before activating, ultimately compromising core configuration…
Read More » -
How Cybercriminals Are Turning Your Inbox Rules Into a Backdoor
Hackers are quietly exploiting a built-in Microsoft 365 feature to steal emails, hide security alerts, and maintain long-term access to…
Read More » -
Microsoft Warns of Critical CVE-2026-33826 Flaw in Active Directory
Microsoft has issued an urgent alert regarding a critical security vulnerability in Windows Active Directory, exposing enterprise networks to serious…
Read More » -
OpenAI Launches GPT-5.4-Cyber to Bolster Cyber Defenses
OpenAI has introduced GPT-5.4-Cyber, a purpose-built variant of its flagship GPT-5.4 model, fine-tuned specifically for advanced defensive cybersecurity workflows. The…
Read More » -
Ivanti Neurons for ITSM Vulnerabilities Let Remote Attackers Hijack User Sessions
Ivanti has issued a security advisory detailing two medium-severity vulnerabilities affecting its Neurons for IT Service Management (ITSM) platform. These…
Read More »