HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Ravie LakshmananJul 31, 2026Endpoint Security / Malware Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called...
researchers
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI...
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with...
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Cybersecurity researchers have shared additional technical details about a recently patched critical security...
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform...
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and...
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Ravie LakshmananJul 27, 2026Cyber Attack / Threat Intelligence Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security researchers at depthfirst published working exploit code on July 24 for a GitLab...
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link...
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed...
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Ravie LakshmananJul 22, 2026Linux / Vulnerability Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe...
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Ravie LakshmananJul 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing...
