#that


ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Aug 31, 2026 // 20:53

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under […]

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Aug 25, 2026 // 11:42

Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible […]

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Aug 18, 2026 // 13:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence […]

WhatsApp rolls out new feature that flags potential scam messages

Aug 13, 2026 // 14:57

WhatsApp has begun rolling out a new optional “Scam Alert” feature, which uses a local machine learning model to warn users when scammers are targeting […]

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Aug 11, 2026 // 21:46

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT […]

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

Aug 8, 2026 // 01:05

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and […]

How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore

Aug 7, 2026 // 01:17

By Thyaga Vasudevan, EVP of Product at Skyhigh Security For decades, enterprise security was largely focused on endpoints and networks. By protecting corporate end-user devices, […]

AWS, Google, and Vercel Patch Agent Flaws That Let Tool Calls Skip the Model

Aug 6, 2026 // 11:58

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent’s tools with no check […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

Previous 1 2 3 4 5 … 7 Next