#attacks


Hackers now exploit critical Roundcube flaw in code injection attacks

Sep 24, 2026 // 23:37

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. Roundcube Webmail […]

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

Sep 23, 2026 // 10:36

F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. BIG-IP APM (short for Access […]

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Sep 22, 2026 // 23:57

Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said. The […]

Check Point warns of Management Server zero-day exploited in attacks

Sep 22, 2026 // 19:36

Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. The Security Management Server […]

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Sep 21, 2026 // 17:32

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things […]

BragJack attacks hijack AI browser agents through malicious extensions

Sep 19, 2026 // 17:57

Security researcher Gal Weizman of Forever Security has disclosed a new attack technique that can hijack the AI assistants built into popular browsers using a […]

What Recent AI-Powered Attacks Mean for Your Identity Security

Sep 17, 2026 // 18:57

On September 8, Google Threat Intelligence Group (GTIG) detailed several attacks that show how quickly AI is changing the economics of cybercrime. In one credential-harvesting […]

Chinese hackers use SparroWocky malware in govt espionage attacks

Sep 17, 2026 // 12:16

The China-linked espionage group FamousSparrow has been using a new backdoor named SparroWocky in attacks on government organizations in Latin America. The operations have been […]

Cisco warns of max severity ISE zero-day exploited in attacks

Sep 17, 2026 // 10:56

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild. Cisco ISE is a […]

Critical ScreenConnect flaw now actively exploited in attacks

Sep 16, 2026 // 14:16

Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). ConnectWise shared temporary mitigation measures […]

Previous 1 2 3 4 5 6 … 36 Next