Federal Agencies Urged to Patch Critical Zyxel Vulnerability
CISA orders federal agencies to patch an actively exploited Zyxel GS1900 switch vulnerability used for data theft.
Wednesday, September 23
Monday, September 21
Friday, September 18
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
Chinese Cyber Espionage Targets Latin American Governments with New Malware
PremiumFamousSparrow uses new SparroWocky backdoor to conduct espionage against government targets in Latin America, enabling persistent access.
FBI Disrupts NightmareStresser DDoS-for-Hire Service
PremiumUS authorities seized NightmareStresser domains, disrupting a major DDoS-for-hire service and related attack infrastructure.
Wednesday, September 16
Red Heron's Aggressive Exploitation of Gitea RCE Hits Multiple Nations
Red Heron exploited Gitea RCE to compromise 13 orgs across six countries, targeting exposed instances for swift takeover.
Black Axe Leaders Charged in US for Cybercrime Activities
Five alleged Black Axe leaders extradited to US to face wire fraud and money laundering charges tied to large-scale fraud operations.
Monday, September 14
Friday, September 11
Critical cPanel Vulnerability Patched: Root Access Risk Mitigated
PremiumcPanel patched a flaw allowing a hosting account with mail privileges to create files and escalate to root code execution.
Critical Vulnerabilities in Cisco Firewalls Exploited for Malicious Attacks
PremiumCisco Talos confirms exploitation of Secure FMC flaws enabling root access, malware deployment and staged intrusions by multiple actors.
US Targets Major Cybercrime Marketplace Tied to North Korea
PremiumReport covers US actions against a $2.29B cybercrime marketplace tied to DPRK-linked hacking activities and illicit proceeds.
US Treasury Targets Chinese Scam Platform Xinbi Guarantee with Sanctions
PremiumUS Treasury sanctions Xinbi Guarantee for facilitating scams and money laundering, targeting its infrastructure and operators.
Ransomware Gangs Exploit WatchGuard Firebox Vulnerability
PremiumCISA warns WatchGuard Firebox RCE is being exploited by ransomware gangs to deploy encryptors and extort victims.
Wednesday, September 9
MikroTik Urges Immediate Router Updates to Block Exploitation
MikroTik patched 'MikroTrick' critical flaws that bypass authentication, overwrite configs, and allow device takeover.
AI-Driven Credential Theft: A New Threat Landscape
Threat actors adopt multi-agent AI frameworks to automate credential harvesting, scaling theft and account takeover operations quickly.
Monday, September 7
AI-Driven Attack Breaches Enterprise Network with Unprecedented Speed
PremiumHuman operator using frontier AI models breached an enterprise network and stole root credentials in under 10 hours.
MikroTik Routers Vulnerable to Unauthenticated SSH Exploits
PremiumAttackers exploit internet-exposed MikroTik SSH to gain unauthenticated full administrative control of routers.
Critical Security Flaw in ASUS Control Center Demands Immediate Attention
PremiumASUS Control Center Enterprise CVE-2026-75754 allows unauthenticated remote attackers full administrative control (CVSS 10.0).
Friday, September 4
Breeze Comet Exploits Financial Systems Across Borders
PremiumBrazilian threat group Breeze Comet targets financial systems to steal funds and disrupt operations across banks and payment processors.
Cybercriminals Exploit Brazilian Government Servers to Push Gambling Sites
PremiumGambling Goblin installed malicious Apache modules on Brazilian government and education servers to redirect visitors to betting pages.
Get these articles delivered to your inbox.
Subscribe free