Cybersecurity
News
CISA Adds 4 Actively Exploited Flaws to KEV Catalog
CISA added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE.The Apple...
News
Critical MLflow and FUXA flaws exploited in wild
Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation.Attackers are exploiting the MLflow flaw to reach...
News
City Forum campaign steals data via Salesforce, ServiceNow guest access
A single server (158.220.87.87) has been systematically extracting data from Salesforce and ServiceNow customer portals for over a year, using a purpose-built Go program.Named...
News
StubMaker: 16 typosquat RubyGems packages steal data
Cybersecurity researchers have discovered a new typosquatting campaign, tracked as StubMaker, targeting RubyGems users with a Windows-based information stealer.The 16 malicious gem packages were...
News
SharePoint CVE-2026-55040 exploited after PoC release
Threat actors are actively exploiting a critical Microsoft SharePoint vulnerability (CVE-2026-55040, CVSS 9.1) after a proof-of-concept code was released by Rapid7.The flaw allows unauthenticated...
News
Chrome Store Hit: 737 Fake VPN Extensions Target Russian Users
737 malicious Chrome extensions, impersonating 66 VPN brands like NordVPN and Proton VPN, routed Russian users' browser traffic through a single SOCKS5 proxy infrastructure.Over...
News
Cisco Firewall Flaw Actively Exploited in the Wild
Cisco has confirmed active exploitation of a high-severity vulnerability (CVE-2026-20349) in its Secure Firewall ASA and FTD Software.The flaw allows an unauthenticated, remote attacker...
News
Aug Patch Tuesday: Zero-day exploited, 4 critical RCEs
Microsoft’s August 2026 Patch Tuesday fixes an actively exploited zero-day (CVE-2026-68820) in the Windows kernel driver, used by Lazarus Group in Operation Dream Job.Four...
Latest news
Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.
Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...
Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached
Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...
CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...
