For its March 2026 Security Patch Day, SAP released 15 security notes, headlined by two critical-severity fixes for SAP Quotation Management Insurance (FS-QUO) and SAP NetWeaver Enterprise Portal Administration. […]
Researchers have highlighted several long-standing or sophisticated spy tools that have been quietly exfiltrating data, most notably the resurgence of the Sednit (also known as APT28 or […]
The threat actor group ShinyHunters (also tracked as UNC6040/UNC6240) has claimed responsibility for a new wave of data theft attacks targeting Salesforce Experience Cloud (formerly Community Cloud) sites using the Aura framework. […]
Microsoft Threat Intelligence revealed that the ClickFix social engineering campaign has evolved to use Windows Terminal as a primary vehicle for deploying the Lumma Stealer malware. This update marks a tactical […]
A critical zero-day vulnerability in the User Registration & Membership plugin for WordPress (CVE-2026-1492) is currently being exploited to create unauthorized administrator accounts. The flaw allows unauthenticated […]
CyberStrikeAI is a sophisticated open-source, AI-native security testing platform. While it was built for professional penetration testing, it has been rapidly adopted by threat actors to […]
A Florida woman, Heidi Richards (52, of Brandon), was recently convicted for her role in a massive Microsoft license fraud scheme operated through her company, Trinity Software Distribution. The Fraud […]
Cybersecurity researchers and CISA have disclosed four critical vulnerabilities in Gardyn Home and Gardyn Studio smart gardening systems. These flaws allowed unauthenticated attackers to remotely hijack devices, execute arbitrary commands, and […]
The cybercrime alliance Scattered LAPSUS$ Hunters (SLH) is reportedly offering $500 to $1,000 upfront per call to recruit women for targeted voice phishing (vishing) operations. This tactical shift leverages […]
Peter Williams, the 39-year-old former General Manager of L3Harris Technologies‘ cyber division, Trenchant, was sentenced to seven years and three months in prison for stealing and selling sensitive zero-day […]
© Bulletproof Servers. All rights reserved.