The archive

391 dispatches · newest first · page 1 of 7

1. 2026-09-01Leaked Russian Cyber-Operations Training Materials
2. 2026-09-01Authentication bypass in EOL Proxmox VE 7 release
3. 2026-09-01Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
4. 2026-09-01Berlin refuses to be blackmailed after network breach
5. 2026-09-01Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586CVE-2026-9586
6. 2026-09-0133-hour BGP hijack of Softaculous traffic prompts security scramble
7. 2026-09-01Iranian cyber spies target aviation, fintech developers with new malware
8. 2026-09-01China-Linked Fire Ant Turned Cisco Routers, TACACS Servers Into Espionage Platforms
9. 2026-09-01North Korea-linked IT Workers Are Getting Hired Inside Western Companies
10. 2026-09-01Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After DisclosureCVE-2026-82329
11. 2026-09-01Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
12. 2026-09-01Healthcare cyberattacks hit pacemakers and millions of patient records
13. 2026-09-01WatchGuard Patches Critical Vulnerabilities
14. 2026-09-01Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
15. 2026-09-01PaperCut Exploitation Escalates to Active IntrusionsKEVCVE-2026-82078
16. 2026-08-26U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
17. 2026-08-26AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
18. 2026-08-2214 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
19. 2026-08-21Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
20. 2026-08-21Hundreds of leaked AWS keys give full control over corporate accounts
21. 2026-08-21Hackers poison popular Rust crates to steal developers' credentials
22. 2026-08-21Microsoft patches max severity code execution, privilege escalation flaws
23. 2026-08-21100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin
24. 2026-08-21Russian network monitoring firm confirms cyberattack claimed by pro-Ukraine hackers
25. 2026-08-21North Korean Hackers Tied to Rust Supply Chain Attack
26. 2026-08-21Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
27. 2026-08-21CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
28. 2026-08-21Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.
29. 2026-08-21The Cyber Express Weekly Roundup: Exploited Entra ID Flaw, AI Agent Risks, and Global Cybercrime CrackdownKEVCVE-2026-69836
30. 2026-08-20Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
31. 2026-08-20Ransomware: lockbit5 → usbank.com
32. 2026-08-20Hackers poison arrayref Rust crate to push infostealer malware
33. 2026-08-20[KEV] CVE-2026-72530: TrueConf Server Code Injection VulnerabilityKEVCVE-2026-72530
34. 2026-08-20NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs
35. 2026-08-20JFrog Artifactory Flaws Enable Software Supply Chain Attacks
36. 2026-08-20Frequently asked questions about the active threat to Siemens S7 Series PLCs
37. 2026-08-20Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia
38. 2026-08-20Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin
39. 2026-08-20Exploited Zimbra Flaw Highlights Shrinking Window to PatchKEVCVE-2026-73570
40. 2026-08-20Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
41. 2026-08-20NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
42. 2026-08-20US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign
43. 2026-08-20Ransomware: akira → Ericksen Krentel
44. 2026-08-20Ransomware: xpl0itrs → Target
45. 2026-08-20Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeCVE-2026-32475
46. 2026-08-20Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
47. 2026-08-19Hackers compromise 14,500 Dahua web cameras in 35-day campaign
48. 2026-08-19Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras
49. 2026-08-19[KEV] CVE-2026-64849: MLflow Server-Side Request Forgery VulnerabilityKEVCVE-2026-64849
50. 2026-08-19US charges Iranian hackers over $3.4 billion intellectual property theft
51. 2026-08-19Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware
52. 2026-08-19US charges Iranians for sprawling hacking campaign on government agencies, universities
53. 2026-08-19Critical RCE flaw in Windows IKE Extension now actively exploited
54. 2026-08-19Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs
55. 2026-08-19China-Linked Hacker Shows AI Capabilities in APAC Attack
56. 2026-08-19Ransomware: shinyhunters → Logitech/ Streamlabs
57. 2026-08-19Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
58. 2026-08-18Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
59. 2026-08-18Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
60. 2026-08-18CISA gives feds 3 days to fix actively exploited Ray RCE bug