The Iranian state-sponsored threat actor known as MuddyWater is utilizing social engineering via corporate collaboration platforms to initiate espionage operations […]
Iranian MuddyWater group abuses Microsoft Teams for false-flag ransomware attacks Read More »
Official installers for a widely used disk imaging software have been found to contain malicious code injected by sophisticated threat
Official Daemon Tools installers trojanized in sophisticated supply chain attack Read More »
A critical zero-click vulnerability in the Android operating system allows unauthenticated remote attackers in close proximity or on the same
Critical Android Zero-Click RCE CVE-2026-0073 impacts core ADB interface Read More »
A critical security vulnerability in the Weaver ❨Fanwei❩ E-cology collaboration platform is currently being exploited in the wild. This enterprise-grade
Weaver E-cology collaboration platform under active zero-day exploitation Read More »
A large-scale credential theft operation has been identified targeting tens of thousands of users across global organizations. This campaign is
Microsoft discloses mass token-theft campaign targeting 35,000 users globally Read More »
A critical vulnerability in the Linux Kernel involving incorrect resource transfer between spheres has been added to the federal list
CISA adds Linux Kernel resource transfer flaw CVE-2026-31431 to KEV catalog Read More »
A sophisticated fraud network is utilizing the Mini App feature within Telegram to impersonate high-value brands and deliver Android malware.
Telegram FEMITBOT operation impersonates Apple and NVIDIA to deliver Android malware Read More »
A decade-old logic flaw in the Linux kernel is now under active exploitation following the public disclosure of a proof-of-concept.
Copy Fail Linux Kernel exploit CVE-2026-31431 enters active exploitation phase Read More »
A critical authentication bypass vulnerability in the cPanel and WHM management platform is being mass-exploited to deploy a new strain
Over 44,000 servers compromised as Sorry ransomware exploits cPanel zero-day Read More »
Attackers are aggressively weaponizing a reclassified vulnerability in F5 BIG-IP to deploy web shells and establish persistent footholds in enterprise
