#news


Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Sep 13, 2026 // 17:36

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent’s Sogou Input Method for Windows to deploy the GrayRabbit […]

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Sep 13, 2026 // 13:21

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using […]

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Sep 12, 2026 // 19:00

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited […]

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

Sep 12, 2026 // 17:16

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. […]

When the Whole Company Adopts AI: What It Does to Your SOC

Sep 12, 2026 // 13:30

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the […]

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

Sep 12, 2026 // 12:17

The “major malicious attack” that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published […]

GitLab urges users to patch max severity path traversal flaw

Sep 12, 2026 // 01:37

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. The security flaw, discovered by a […]

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Sep 12, 2026 // 01:37

As AI platforms become part of daily workflows, attackers have found a new way in: the platforms themselves. The Huntress Security Operations Center (SOC) says […]

Artifactory flaws chained in attacks deploying backdoor malware

Sep 12, 2026 // 01:37

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted […]

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Sep 12, 2026 // 01:37

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts […]

Previous 1 … 37 38 39 40 41 … 388 Next