Stay informed about the latest cybersecurity threats, vulnerabilities, malware campaigns, phishing trends, supply-chain attacks, and security advisories. This section provides timely updates and practical insights to help organizations understand emerging risks and strengthen their security posture.
The discovery of more than 16,000 Supabase databases exposing readable tables to the public Internet is a strong reminder that cloud and backend security failures are increasingly caused not by s…
The discovery that AI-related credentials from more than 80,000 corporate domains have appeared in infostealer data should be viewed as a major identity-security warning rather than merely anothe…
The latest activity linked to JADEPUFFER shows how ransomware-style attacks are expanding from individual servers and databases into the cloud control plane itself. Microsoft says the threat acto…
The Department of Information and Communications Technology’s investigation into a possible breach of the Environmental Management Bureau’s Company Registration System (CRS) is partic…
Reports that attackers are actively exploiting two previously unknown remote-code-execution vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway should be treated as a serious warning fo…
The newly analyzed Lunex Stealer campaign demonstrates why Bring Your Own Vulnerable Driver attacks remain such a difficult problem for endpoint security. The malware chain does not rely on an un…
The renewed exploitation of Oracle PeopleSoft CVE-2026-35273 shows how quickly threat actors adapt once defenders publish mitigation guidance. Google’s Mandiant and Threat Intelligence Grou…
OpenAI’s disclosure that autonomous AI agents accidentally uploaded 53 user-provided images to third-party image-hosting services highlights a privacy problem that becomes increasingly impo…
CISA has added CVE-2026-65660, a high-severity code-injection vulnerability in Microsoft SharePoint Server, to its Known Exploited Vulnerabilities catalog after confirming active exploitation in …
The breach of Clop’s ransomware leak site by rival extortion group ShinyHunters is an unusual example of cybercriminal infrastructure becoming the victim of the same vulnerability-management fai…
Kiteworks’ extraordinary recommendation that customers worldwide temporarily shut down their servers for a six-hour window demonstrates how seriously the company and law-enforcement authorities …
A newly disclosed vulnerability in the Elementor Website Builder plugin demonstrates how a seemingly narrow Cross-Site Request Forgery issue can expand into full administrative compromise when it affe…
The latest version of PamStealer shows how quickly macOS information-stealing malware is evolving from relatively straightforward credential theft into a more carefully engineered delivery and pe…
CISA’s latest Known Exploited Vulnerabilities update highlights a particularly uncomfortable mix of enterprise attack surfaces: Microsoft SharePoint, WSO2 API infrastructure, Adobe Commerce/Mage…
Severity: HIGH · Priority: P2 — CI/CD credential theft from active build pipelines, investigate on hit Rule note — GS TROJAN: Mini Shai-Hulud CI/CD credential exfiltration domain m-kosche.com These ru…
The theft of approximately $351.6 million from cryptocurrency exchange Bitget is another major reminder that securing digital assets requires far more than protecting private keys. According to B…
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming evidence of active exploitation: CVE-2026-5430 affecting multiple WSO2 API-management products a…
The discovery of Carbonato, a newly documented botnet targeting exposed Docker hosts, highlights how traditional infrastructure weaknesses are being combined with AI-driven post-compromise toolin…
The latest evolution of the MacSync malware demonstrates how macOS threats are becoming more modular, evasive, and increasingly willing to abuse legitimate cloud services as part of their deliver…
The discovery of Corp MDM, a new Android spyware implant targeting logistics organizations, highlights a broader shift in cybercrime: attackers are increasingly building malware around the exact …