#attacks


Former US Air Force members sent to prison over BEC attacks

Sep 29, 2026 // 21:18

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year […]

Apple patches CoreGraphics zero-day flaw exploited in attacks

Sep 29, 2026 // 13:17

Apple released security updates to fix a zero-day vulnerability exploited in “extremely sophisticated” targeted attacks on iOS devices. Tracked as CVE-2026-20700, this flaw stems from […]

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Sep 29, 2026 // 13:11

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in […]

JadePuffer agentic AI attacks target Azure, destroy cloud resources

Sep 28, 2026 // 19:36

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. The malware emerged in July, […]

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Sep 28, 2026 // 00:16

Update: Article rewritten with official confirmation from Citrix. Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are […]

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

Sep 26, 2026 // 22:17

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat […]

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Sep 26, 2026 // 00:58

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning […]

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

Sep 25, 2026 // 20:37

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider […]

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Sep 25, 2026 // 13:28

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known […]

Placeholder domain used in dev docs now serves ClickFix attacks

Sep 24, 2026 // 23:38

The “third-party.com” domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows […]

Previous 1 2 3 4 5 … 36 Next