“AI”

Gunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.

CISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.

Malicious LiteLLM PyPI releases contained credential-stealing code that may have exposed secrets for 2,100+ organizations.

Lazarus exploits AFD.sys zero-day (CVE-2026-68820) to deploy FudModule rootkit for stealthy kernel persistence.

Microsoft patched 'LegacyHive', a Windows zero-day vulnerability disclosed after July Patch Tuesday that allows privilege escalation.

A Mirai variant adds encrypted C2 communications and a credential 'sniffer' to improve stealth and persistence for botnets.

Flock Safety mandates 'Audit Assistance' for customers and reduces license plate retention to seven days to improve privacy controls.

CERT.PL reports Russian-linked hackers accessed a Polish power plant OT network via a private APN, impacting critical infrastructure.

Zoom annotation vulnerabilities could allow meeting participants to take control of other attendees' clients without interaction.

Browser extension vulnerabilities in Belgium's eID framework allow remote code execution and full compromise of citizen accounts.

Exploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.

Jewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.

Critical Adobe Commerce vulnerability was targeted and exploited shortly after disclosure, risking customer account takeover.

Microsoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.

BdThemes supply-chain compromise poisoned JSON feeds to create rogue WordPress admin accounts, backdooring sites without modifying plugin files.