“Networks”

Spring Ring campaign abuses Microsoft Teams help-desk calls to socially engineer remote execution and lateral network compromise.

PaperCut NG/MF zero-day vulnerabilities were exploited in-the-wild to steal data before emergency patches were released.

Investigation links massive ₹5,000 crore cyber fraud network to Kanpur; 23 bank employees suspended amid probe.

TerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.

Shadowserver reports 8,300+ exposed Gitea instances remain unpatched and vulnerable to remote code execution attacks.

Android 17 introduces OS-wide Encrypted Client Hello (ECH) to prevent networks from observing users' visited sites.

Bluetooth attack chain allows nearby attackers root-level code execution on Unitree G1 locomotion computers, controlling movement and sensors.

Critical Cosmos EVM balance-handling flaw GHSA-7g4w-cg88-2cq2 exploited to drain funds from six blockchains.

GlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.

U.S. agencies disrupted a China-linked hacking platform (QTFY) used against military and critical infrastructure, seizing infrastructure domains.

Australian authorities arrested two suspects tied to TeamPCP supply-chain attacks that tampered with open-source developer tools.

PaperCut NG/MF zero-day is actively exploited across all versions; vendor issued emergency patches and confirmed customer incidents.

US sanctions Iranian cyber actors while the UK discloses a cyber intrusion that disrupted a small power plant.

Australian authorities warn of active exploitation of a critical TeamCity flaw; customers urged to patch immediately.

Retired official in Pune lost ₹1.15 crore to a fake trading app campaign promoted via social engineering.

Cisco fixes nine Crosswork and Secure Workload vulnerabilities, five rated CVSS 10.0 requiring urgent updates.

Medusa ransomware campaign now affects 500+ organizations and increasingly targets critical infrastructure sectors.

CISA ordered immediate patching of TrueConf Server vulnerabilities that are being actively abused to deploy malware.

Critical Citrix NetScaler authentication-bypass patches issued; exploitation expected without authentication across gateways and ADCs.