All Articles
Security Intelligence
3736 articles · Updated every 8 hours
Advertisement
Trojanized Gaming Tools Deliver Java-Based RAT via PowerShell
Security researchers identify a malware campaign using trojanized gaming tools to deliver a Java-based RAT using PowerShell and portable Java runtimes.
Critical Vulnerabilities in Gardyn Smart Gardens Enable Remote Takeover
CISA warns of critical flaws in Gardyn Smart Gardens, including CVE-2024-39682 and CVE-2024-39683, allowing remote code execution and unauthorized access.
Meta Files Lawsuits Against Global Celeb-Bait Scam Networks
Meta takes legal action against advertisers in Brazil, China, and Vietnam, disabling accounts and domains used in large-scale celebrity-bait fraud schemes.
OpenLDAP and lldpd Vulnerabilities: Analyzing DoS Risks
Detailed analysis of CVE-2025-25164 in OpenLDAP and CVE-2025-25330 in lldpd, focusing on NULL pointer dereference and memory leak impacts on infrastructure.
Cisco SD-WAN Zero-Day Under Exploitation for 3 Years
A critical zero-day vulnerability, CVE-2026-20127, in Cisco SD-WAN has been actively exploited by a sophisticated threat actor for three years.
FinTech Breach: SonicWall Lawsuit & Vendor Liability
A FinTech company's lawsuit against SonicWall raises critical questions about responsibility when a data breach occurs via a third-party security vendor's product.
Advertisement
Insecure Google API Keys Expose Gemini AI and Private Data
Exposed Google API keys, once considered low-risk for services like Maps, now allow unauthorized access to Gemini AI models and sensitive project data.
GetProcessHandleFromHwnd API: UAC Bypass Implications
Investigate the GetProcessHandleFromHwnd API's role in a Quick Assist UAC bypass. Understand its mechanism, UIAccess implications, and defender recommendations.
Multiple DoS/RCE Vulnerabilities in Yokogawa CENTUM VP R6, R7
CISA alerts to multiple medium-severity vulnerabilities in Yokogawa CENTUM VP R6 and R7, allowing DoS and RCE via crafted packets in critical infrastructure…
Critical Authentication Flaws in Chargemap EV Infrastructure
CISA warns of critical vulnerabilities in Chargemap EV charging stations, including unauthenticated WebSocket access and session hijacking (CVE-2026-25851).
Strategic Board Oversight: Supply Chain, AI, and Regulatory Risks
An analysis of critical cybersecurity risks for board oversight, covering supply chain integrity, AI weaponization, and regulatory liability requirements.
NATO Approves Apple iPhone and iPad for Classified Communications
Apple iOS and iPadOS devices added to NATO’s NIAPC, authorizing their use for handling NATO Restricted level classified information and communications.
ManoMano Data Breach: Third-Party Compromise Impacts 3.8M Customers
European DIY giant ManoMano suffers a supply chain data breach affecting 3.8 million customers after an unauthorized access to a third-party service provider.
Trend Micro Patches Critical RCE Flaws in Apex One Security Platform
Trend Micro addresses two critical vulnerabilities, CVE-2023-32524 and CVE-2023-32525, in its Apex One platform that allow for remote code execution.
Aeternum C2 Leverages Polygon Blockchain for Command-and-Control
Aeternum C2 loader uses the Polygon blockchain to store encrypted instructions, creating a decentralized infrastructure resilient to traditional takedowns.
Recorded Future Integrates CYBERA Data to Combat Money Mule Networks
Recorded Future partners with CYBERA to integrate verified scam-linked bank account data, enhancing payment fraud detection and money mule mitigation efforts.
Gambit Security Raises $61M to Converge Physical and Cyber Security
Gambit Security exits stealth with $61M in funding to integrate physical access control and video surveillance into modern enterprise IT security stacks.
Anthropic Patches Claude Code Vulnerabilities Enabling Silent Hacking
Anthropic addressed flaws in Claude Code that allowed attackers to execute arbitrary commands on developer devices via malicious repository configurations.
Ransomware Payment Rates Hit All-Time Low Despite Surge in Attacks
Ransomware payment rates dropped to a record 28% in 2023 as organizations improve recovery and face increasing legal pressure against paying threat actors.
Olympique Marseille Confirms Data Leak Following Heller Cyberattack
French football club Olympique de Marseille investigates a data breach after the Heller extortion group leaked 3.5 GB of sensitive player and staff records.
Threat Intelligence Analysis: Kali Linux AI Integration and Browser Crash Traps
Analysis of Kali Linux Claude AI integration, Chrome browser crash traps, and the ongoing exploitation of WinRAR vulnerabilities by LockBit affiliates.
UAT-10027 Deploys Dohdoor Backdoor via DNS-over-HTTPS
UAT-10027 targets U.S. healthcare and education sectors using the novel Dohdoor backdoor, leveraging DNS-over-HTTPS for stealthy C2 communication.
Entropy Deficiencies in LLM-Generated Passwords
Research indicates that Large Language Models produce predictable passwords with biased character distributions, increasing vulnerability to targeted attacks.
US Sanctions Russian Exploit Broker Operation Zero
US Treasury sanctions Russian exploit broker Operation Zero and its owner Sergey Zaytsev for facilitating zero-day trades with Russian intelligence agencies.