malicious

June 18, 2026

Critical Information Disclosure in Gravity SMTP Plugin: Active Exploitation of API Credentials

Security researchers have identified a significant information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is currently being leveraged…
Read More »
June 18, 2026

Critical Command Injection and Data Exfiltration Vulnerabilities Identified in Splunk AI Toolkit

Splunk has issued a critical security advisory regarding a significant vulnerability discovered within its AI Toolkit. This flaw provides a…
Read More »
June 17, 2026

Technical Analysis: Sapphire Sleet’s Cascading AppleScript Payload Chain on macOS

Recent threat intelligence has uncovered a sophisticated macOS campaign attributed to the North Korean actor Sapphire Sleet. The campaign leverages…
Read More »
June 17, 2026

Supply Chain Alert: 140 Mastra npm Packages Compromised via Typosquatted Dependency

A sophisticated software supply chain attack has recently targeted the JavaScript ecosystem, compromising over 140 npm packages within the popular…
Read More »
June 17, 2026

Serverless Phishing: How Threat Actors Weaponize GitHub Pages and APIs for Large-Scale Financial Fraud

A highly sophisticated, long-running phishing campaign has transitioned into a modular, serverless architecture, specifically designed to exploit the trust of…
Read More »
June 17, 2026

Supply Chain Attack Compromises JetBrains Marketplace, Exposing 70,000 Developers to Credential Theft

A sophisticated supply chain campaign has recently been uncovered, targeting the developer ecosystem by compromising the trust within the JetBrains…
Read More »
June 17, 2026

Rokarolla: zLabs Uncovers Sophisticated Android Banking Trojan

Cybersecurity researchers have uncovered a highly capable Android banking trojan dubbed Rokarolla—a name derived directly from its Command-and-Control (C2) infrastructure.…
Read More »
June 17, 2026

Critical Alert: Active Exploitation of Authentication Bypass in Oracle PeopleSoft (CVE-2026-35273)

The Cybersecurity and Infrastructure Security Agency (CISA) has escalated its warning regarding a critical security flaw within the Oracle PeopleSoft…
Read More »
June 17, 2026

Trojanized Wallpapers: How Attackers are Weaponizing Steam Workshop via Wallpaper Engine

A sophisticated cyberattack campaign has been identified leveraging the Steam Workshop’s community-driven sharing model to distribute a diverse array of…
Read More »
June 17, 2026

Evolution of SprySOCKS: Analyzing the New Windows-Based Backdoor Variants

For much of its operational lifespan, the SprySOCKS backdoor has been a staple of the Linux environment, utilized extensively by…
Read More »
June 17, 2026

27-Year Authentication Bypass and Kernel Heap Over-read Fixed in OpenBSD’s PPP Stack

A critical architectural flaw has been identified within the OpenBSD Point-to-Point Protocol (PPP) stack, specifically targeting the Password Authentication Protocol…
Read More »
June 16, 2026

Stealth via Infrastructure: How DragonForce Leverages Microsoft Teams TURN Relays for C2

In a sophisticated display of living-off-the-trusted-infrastructure, the DragonForce ransomware group has successfully weaponized Microsoft Teams’ backend architecture to mask malicious…
Read More »
June 16, 2026

Active Exploitation Detected: Critical Vulnerabilities Targeting Fortinet FortiSandbox Infrastructure

The cybersecurity landscape has seen a rapid escalation in activity as threat actors pivot toward targeting core security infrastructure. Recent…
Read More »
June 16, 2026

Advanced Phishing Evolution: UNC1151 Targets Gmail with Real-Time 2FA Interception

The threat actor known as Ghostwriter (UNC1151) has significantly upgraded its operational capabilities, moving beyond localized phishing to execute sophisticated,…
Read More »
June 16, 2026

Supply Chain Attack on WordPress Ecosystem: How a CDN Compromise Exposed 1.2 Million Sites

A sophisticated supply chain attack has struck the WordPress ecosystem, targeting the widely used OptinMonster plugin and exposing over 1.2…
Read More »
June 16, 2026

The “SearchLeak” Attack Chain: Analyzing the Critical Data Exfiltration Vulnerability in Microsoft 365 Copilot

Microsoft 365 Copilot, while revolutionizing enterprise productivity, has been revealed to harbor a sophisticated vulnerability known as “SearchLeak.” This critical…
Read More »
June 15, 2026

Critical Alert: Active Exploitation of Jenkins RCE Vulnerability (CVE-2026-53435) via Insecure Deserialization

A critical Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-53435, is currently being leveraged in active, real-world cyberattacks targeting Jenkins…
Read More »
June 15, 2026

Velvet Ant: Surgical Subversion of Critical Infrastructure Authentication Stacks (PAM and OpenSSH)

In a sophisticated display of cyber-persistence, the China-nexus threat actor known as Velvet Ant has been unmasked for executing a…
Read More »
June 15, 2026

The Anatomy of SearchJack: Exploiting Chrome Settings for Large-Scale Affiliate Revenue

A sophisticated, coordinated campaign involving 23 seemingly benign Chrome extensions—tracked under the moniker “SearchJack”—has successfully compromised the default search configurations…
Read More »
June 15, 2026

Critical Authentication Bypass in Palo Alto Networks GlobalProtect: Technical Deep Dive and Mitigation Strategies

Palo Alto Networks has issued a high-priority security advisory following the confirmed active exploitation of a critical vulnerability in its…
Read More »

Previous page Next page