SonicWall SMA1000 Appliances Face New Security Threats
PremiumMultiple zero-days in SonicWall SMA1000 appliances are being actively exploited, enabling unauthenticated RCE and potential network compromise.
Friday, September 4
Wednesday, September 2
Cybercriminals Exploit Polygon Blockchain in New ClickFix Attack
ClickFix campaign used EtherHiding on Polygon to dynamically update C2 addresses after compromising 31 organizations.
Hackers Exploit Microsoft Teams Calls in Advanced Social Engineering Attack
Spring Ring campaign abuses Microsoft Teams help-desk calls to socially engineer remote execution and lateral network compromise.
Iranian Hackers Exploit Coding Tests to Deploy Cross-Platform Malware
Nimbus Manticore lures developers with fake coding tests to deliver cross-platform RATs (Node.js/JavaScript) for espionage.
Nutex Health Faces Data Breach by Notorious Ransomware Group
Ransomware group claims Nutex Health breach; SEC filing says patient, employee, provider, business, and financial information accessed.
Critical Ruby on Rails Flaw Under Active Exploitation by Threat Actors
CyberWire notes active exploitation of a critical Ruby on Rails vulnerability enabling reconnaissance and potential RCE.
Chinese Hackers Exploit Cisco Routers in 'Fire Ant' Cyber Campaign
Fire Ant compromised Cisco routers and the trust layer, using them to forward traffic, steal credentials, and blind logs.
Coast Guard Launches New Office to Strengthen Maritime Cybersecurity
US Coast Guard creates centralized Office of Maritime Cybersecurity Policy to govern port, vessel, and maritime facility cybersecurity.
AI-Assisted Porting of PLC Exploits: Costs and Challenges
Forescout used an LLM to port a PLC RCE exploit between WAGO models, lowering technical barriers for OT attacks.
Breeze Comet Exploits Brazilian Payment Systems for Fraudulent Gains
Breeze Comet (UNC5669) manipulates Brazilian payment systems to execute fraudulent transfers targeting financial services and retail.
Cyberattack Disrupts Boston Scientific's Manufacturing Operations
Cyber incident disrupted Boston Scientific manufacturing, order processing, and product shipments after a network outage was detected.
WatchGuard Addresses Critical Security Flaws in Fireware OS and Dimension
WatchGuard patched three critical Fireware OS iked-process issues that allowed unauthenticated remote code execution.
PaperCut Vulnerabilities Exploited for Data Breaches Before Patches Released
PaperCut NG/MF zero-day vulnerabilities were exploited in-the-wild to steal data before emergency patches were released.
McKesson Faces Data Breach as ShinyHunters Claims Responsibility
McKesson investigates a data-theft extortion incident after ShinyHunters claimed to steal roughly 284 million records.
Iranian Cyber Espionage Group Targets Tech Specialists with New Malware
Kaspersky links NodeRabbit malware to Iranian espionage campaigns targeting aviation and fintech developers in multiple countries.
Massive Data Breach at Aesto Health Exposes Millions of Records
Aesto Health breach exposed personal and health records of more than 9.5 million individuals from AWS infrastructure.
Urgent Patch Required: Over 21,000 Exchange Servers at Risk
Nearly 22,000 Microsoft Exchange servers remain unpatched for CVE-2026-62911, enabling mailbox hijacking at scale.
Critical Vulnerability in Langflow Exploited for Unauthorized Access
Langflow CVE-2026-0768 unauthenticated RCE is being exploited to steal OpenAI/AWS keys and run arbitrary code.
Exploitation of JFrog Artifactory Vulnerability Raises Security Concerns
Authentication bypass in JFrog Artifactory (CVE-2026-82329) is actively exploited to mint admin tokens and seize repositories.
Monday, August 31
Get these articles delivered to your inbox.
Subscribe free