“AI”

Malware tied to F5 BIG-IP APM intrusions injects PHP web shell into memory to evade disk-based detection and persistence.

Researcher released a zero-day 'ShieldCrash' exploit targeting Windows Defender components, enabling local bypasses and exploits.

Cisco Talos confirms exploitation of Secure FMC flaws enabling root access, malware deployment and staged intrusions by multiple actors.

Attackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.

Researchers describe workflow identity hijacking where AI automation's privileged identities are abused to exfiltrate sensitive data.

Report covers US actions against a $2.29B cybercrime marketplace tied to DPRK-linked hacking activities and illicit proceeds.

Check Point patches two 9.8 CVSS VPN certificate flaws allowing unauthenticated remote code execution under specific conditions.

Actor used hundreds of AI agents to craft exploits for PaperCut NG/MF flaws and breached over 440 vulnerable instances.

US Treasury sanctions Xinbi Guarantee for facilitating scams and money laundering, targeting its infrastructure and operators.

Cisco and CISA warn CVE-2026-20079 in Secure FMC is exploited in the wild to gain elevated access and persist.

IDScan confirms breach linked to 153 million driver's license scans, raising large-scale identity and fraud risks.

CISA added CVE-2026-19490 (NetScaler authentication bypass) to KEV after in-the-wild exploitation; urgent mitigations required.

BlueMoon exploit kit used by multiple espionage groups chains Chrome and Windows zero-days to gain remote code execution.

Microsoft released an unprecedented Patch Tuesday fixing 974 CVEs, including two actively exploited Windows zero-days; prioritize critical updates.