#news


Russian state hackers use new RedFlick technique to push malware

Sep 30, 2026 // 23:36

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed “RedFlick” to deploy its signature CosmicPulse backdoor. Although the tactic […]

Over 543,000 valid credentials exposed in public GitHub repositories

Sep 30, 2026 // 21:17

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive […]

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Sep 30, 2026 // 19:50

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from […]

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Sep 30, 2026 // 19:40

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed […]

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Sep 30, 2026 // 18:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution […]

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Sep 30, 2026 // 18:30

Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an […]

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Sep 30, 2026 // 18:00

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures […]

Cisco warns of new SD-WAN zero-day exploited in attacks

Sep 30, 2026 // 17:56

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to […]

AI’s Third Wave: Coworkers Break the Security Model That Worked for Agents

Sep 30, 2026 // 17:16

An AI agent borrows your credentials. An AI coworker never gives them back. By Itamar Apelblat, Co-Founder and CEO, Token Security We no longer have […]

Microsoft to block Entra ID script injection attacks starting October

Sep 30, 2026 // 16:56

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. The company first […]

Previous 1 … 11 12 13 14 15 … 388 Next