Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Ravie LakshmananAug 12, 2026Vulnerability / Cyber Espionage The North Korean threat actor known as Lazarus Group has been attributed to...
Hacking
Category Added in a WPeMatico Campaign
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
Ravie LakshmananAug 12, 2026Browser Security / Privacy A massive set of 737 free VPN and proxy extensions have been found...
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning
A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers...
Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none....
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Ravie LakshmananAug 12, 2026Vulnerability / Web Security Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce,...
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Ravie LakshmananAug 12, 2026Vulnerability / Threat Intelligence Threat actors have begun to actively exploit a recently patched critical security flaw...
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud...
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
Ravie LakshmananAug 12, 2026Enterprise Security / Vulnerability SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud...
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Ravie LakshmananAug 12, 2026Zero-Day / Vulnerability The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and...
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Swati KhandelwalAug 11, 2026Vulnerability / Windows Security Microsoft released its monthly security updates on Tuesday, and one of the flaws...
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Ravie LakshmananAug 11, 2026Botnet / Vulnerability Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of...
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client
Swati KhandelwalAug 11, 2026Vulnerability / Software Security Anyone sharing their screen on a Zoom call could have taken over the...
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Ravie LakshmananAug 11, 2026Social Engineering / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a...
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Security researchers found a way to enter Microsoft SharePoint servers as any user,...
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations...
