Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Ravie LakshmananAug 11, 2026Social Engineering / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a...
Ravie
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Ravie LakshmananAug 11, 2026Supply Chain Attack / Vulnerability Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin...
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Ravie LakshmananAug 10, 2026Ransomware / Cybercrime Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has...
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
Ravie LakshmananAug 10, 2026Cybersecurity / Hacking A lot of security problems still begin with someone doing a completely normal thing....
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Ravie LakshmananAug 10, 2026Malware / Cybercrime Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named...
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Ravie LakshmananAug 08, 2026Zero-Day / Vulnerability Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data...
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
Ravie LakshmananAug 08, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity...
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
Ravie LakshmananAug 07, 2026Malware / Social Engineering ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing...
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Ravie LakshmananAug 06, 2026Network Security / Vulnerability Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst...
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Ravie LakshmananAug 06, 2026Hacking News / Cybersecurity News Apparently, opening the thing is now enough. A repo can run before...
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come...
OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
Ravie LakshmananAug 05, 2026Cybercrime / Artificial Intelligence OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial...
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access...
