#news


UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

Jul 19, 2026 // 16:35

Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According […]

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Jul 19, 2026 // 16:25

A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days […]

WordPress Core “wp2shell” RCE flaws get public exploits, patch now

Jul 19, 2026 // 00:58

Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. […]

Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

Jul 19, 2026 // 00:58

7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open […]

The Future of Age Verification: Your Face Never Leaves Your Device

Jul 18, 2026 // 17:58

Age checks are becoming law worldwide. The question is no longer whether platforms verify age, but what happens to the faces they collect — and […]

Microsoft warns of surge in ACR Stealer attacks on customers

Jul 18, 2026 // 17:58

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. […]

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

Jul 18, 2026 // 00:37

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. The […]

Abbott Laboratories probes two cyber incidents amid extortion claims

Jul 18, 2026 // 00:36

Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also […]

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

Jul 18, 2026 // 00:24

Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, […]

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

Jul 18, 2026 // 00:24

A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator’s own dashboard claims 3,811 unique AWS keys. A […]

Previous 1 … 215 216 217 218 219 … 388 Next