Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Ravie LakshmananSep 30, 2026Endpoint Security / Social Engineering Microsoft has warned of phishing campaigns distributing an installer for the MSP360...
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Swati KhandelwalSep 30, 2026Vulnerability / Network Security Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager,...
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Ravie LakshmananSep 30, 2026Malware / Artificial Intelligence Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product...
Know Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there...
iPhone Security Warning: Apple Says iOS 26 Flaw May Have Been Exploited
If your iPhone is still running iOS 26, Apple has given you another reason to update. Apple released iOS 26.7.1...
TerminalFix and Lorem Ipsum Loader enable covert tunneling
In August 2026, Sophos analysts began investigating a series of Managed Detection and Response (MDR) cases that involved ClickFix-style lures...
Sophos Firewall v23 is now in early access
Sophos Firewall v23 brings many of your top-requested enhancements in one feature-packed release. From new AI-powered assistance and a modern REST...
Trump’s answer to AI’s image problem: Industry self-regulation and a new name
if ( !emtpy($headline_subheadline ) ) : ?> An executive order mandates a terminology shift across federal agencies, while a parallel...
Apple issues urgent iOS patch as it navigates the spyware arms race
if ( !emtpy($headline_subheadline ) ) : ?> A new zero-click flaw in CoreGraphics underscores the precarious nature of mobile endpoint...
How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank
After October 2023, delay times at checkpoints across Nablus spiked to levels beyond anywhere else in the West Bank. Commuters...
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT Pierluigi Paganini September 30, 2026 Threat actors abused fake ChatGPT...
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 30, 2026 U.S. Cybersecurity and...
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign Pierluigi Paganini September 30, 2026 Mandiant and GTIG detail...
Pentagon personnel database breach exposes personal data of millions
The US Department of Defense has confirmed a breach at one of its main repositories of personnel information, the Defense...
