#one


One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

Aug 18, 2026 // 14:36

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according […]

737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One

Aug 12, 2026 // 17:15

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an […]

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

Jul 29, 2026 // 19:51

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, […]

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Jul 15, 2026 // 08:37

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to […]

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

Jul 13, 2026 // 16:53

Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows […]

Webinar: Why account takeovers remain one of the hardest threats to stop

Jun 25, 2026 // 15:16

Organizations continue to invest in phishing defenses, identity protection, and multi-factor authentication, yet account takeover attacks remain one of the most disruptive security incidents facing […]

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Jun 19, 2026 // 19:09

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent […]

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Jun 16, 2026 // 14:21

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company […]

VS Code zero-day lets hackers steal GitHub tokens in one click

Jun 3, 2026 // 11:57

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by […]

Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

Jun 3, 2026 // 00:04

Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in […]