All Articles
Security Intelligence
3410 articles · Updated every 8 hours
Advertisement
Android StrongBox DoS Vulnerability Patched – Update Now
A critical Denial-of-Service vulnerability in Android's StrongBox keymaster and Framework component has been patched. Immediate updates are crucial for device security.
Critical Flowise Vulnerability: Arbitrary Code Execution and File Access
A critical vulnerability in Flowise allows attackers to execute arbitrary code and access file systems due to improper JavaScript validation. Patching is urgent.
Automated Pentesting Limitations: The PoC Cliff and Validation Gap
Automated pentesting tools often plateau, leaving critical attack surfaces untested. Learn about the 'PoC cliff' and its impact on security validation.
APT28 FrostArmada DNS Hijack Campaign Steals Microsoft 365 Logins
Authorities disrupt APT28's FrostArmada campaign, which used DNS hijacking of MikroTik and TP-Link routers to steal Microsoft 365 account credentials.
ComfyUI Instances Abused by Cryptomining Botnet: Mitigation
Over 1,000 internet-exposed ComfyUI instances are actively targeted by a cryptomining and proxy botnet. Secure your deployments now.
CVE-2026-34040: Docker AuthZ Bypass and Host Access — Patch Now
Attackers can bypass Docker Engine AuthZ plugins via CVE-2026-34040, an incomplete fix for CVE-2024-41110. Secure your container host with this guide.
Advertisement
Hong Kong National Security Law: Forced Encryption Key Disclosure Risks
Hong Kong's revised National Security Law empowers police to compel individuals, including airport transits, to disclose encryption keys and device passwords.
Medusa Ransomware: Rapid Vulnerability Weaponization and Analysis
An analysis of Medusa ransomware's rapid exploitation of vulnerabilities and Zero-Day bugs to exfiltrate and encrypt data within days of initial access.
GPUBreach Attack: Exploiting GPU Rowhammer for Root Shell Access
Research reveals GPUBreach, a technique using GPU-based Rowhammer to achieve root shell access and privilege escalation on shared memory systems.
Managing Recurring Credential Incident Risks in Enterprise Environments
Analyze the financial and operational impact of recurring credential incidents, beyond the $4.4 million average breach cost cited in recent industry reports.
Wynn Resorts Breach: 21,000 Employees Impacted by ShinyHunters
Casino operator Wynn Resorts confirms a data breach affecting 21,000 employees following an extortion attempt by the ShinyHunters threat group.
White House FY2027 Budget Proposes $707 Million CISA Funding Cut
The White House proposes a $707 million reduction to CISA's budget for FY2027, refocusing the agency on federal agency and critical infrastructure protection.
Flowise AI CVE-2025-59528 RCE Exploitation: Mitigation Guide
Active exploitation of CVE-2025-59528 (CVSS 10.0) targets Flowise AI's CustomMCP node. Learn how to detect and patch this critical RCE vulnerability today.
Storm-1175: China-Linked Zero-Day Exploits Deploy Medusa Ransomware
China-linked actor Storm-1175 is weaponizing zero-day and N-day vulnerabilities in perimeter assets to execute high-velocity Medusa ransomware attacks.
CVE-2024-29847: Ivanti Endpoint Manager RCE Patch and Detection Guide
Ivanti Endpoint Manager (EPM) critical RCE (CVE-2024-29847) allows unauthenticated attackers to execute code with SYSTEM privileges via deserialization.
Axios Attack: Industrialized Social Engineering on NPM Maintainers
An analysis of the Axios NPM package attack reveals advanced, scaled social engineering campaigns targeting open-source maintainers, elevating supply chain risk.
AI-Assisted Supply Chain Attack Targets GitHub Misconfigurations
Analysis of the AI-assisted PRT-scan supply chain attack targeting GitHub misconfigurations. Learn about automated threats and securing repositories.
GPUBreach Attack: Exploiting GDDR6 via GPU Rowhammer Bit-Flips
Researchers discover GPUBreach, a Rowhammer-style attack on GDDR6 memory that enables privilege escalation and full system takeover on modern GPUs.
German Authorities Identify GandCrab and REvil Ransomware Leaders
German and US authorities identify Russian nationals behind GandCrab and REvil ransomware operations, marking a major step in ransomware attribution.
Meta Legal Ruling: The Privacy-Preserving Design Choice Liability
A New Mexico court ruling against Meta frames end-to-end encryption as a design liability, potentially impacting future secure software architecture.
Fix for Classic Outlook 0x80040115 Error Restores Email Delivery
Microsoft resolves a persistent bug in Classic Outlook causing 0x80040115 errors and email delivery failures for Outlook.com users. Learn how to fix it.
DPRK Hackers Abuse GitHub Infrastructure for C2 in South Korea
North Korean state-sponsored actors are leveraging GitHub as a command-and-control platform in complex multi-stage attacks targeting South Korean organizations.
Iran-Linked Password-Spraying Targets 300+ Israeli Organizations
Iran-linked threat actors launched coordinated password-spraying attacks against Israeli and UAE Microsoft 365 environments in March 2026.
CVE-2026-35616: Fortinet FortiClient EMS Vulnerability — KEV Alert
CISA adds CVE-2026-35616 affecting Fortinet FortiClient EMS to its Known Exploited Vulnerabilities catalog. Learn how to mitigate this access control flaw.