Breeze Comet Exploits Brazilian Payment Systems for Fraudulent Gains
Breeze Comet (UNC5669) manipulates Brazilian payment systems to execute fraudulent transfers targeting financial services and retail.
Wednesday, September 2
Monday, August 31
Friday, August 28
Critical Privilege Escalation Flaw Discovered in GlobalProtect App
PremiumGlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.
Critical Microsoft SQL Server Vulnerability Demands Immediate Attention
PremiumCISA added a Microsoft SQL Server RCE (CVE-2019-1068) to KEV after observed exploitation allowing code execution under SQL Server service.
Monday, August 24
wp2shell Exploit Attempts Highlight Urgency in Vulnerability Response
Premiumwp2shell critical chain saw 45 million exploit attempts, illustrating compressed vulnerability exploitation windows for popular WordPress sites.
Trojanized npm Packages Unleash AI-Powered RedC2 4.0 Backdoor
PremiumTrojanized npm packages install RedC2 4.0 Linux backdoor with AI-assisted command-and-control capabilities.
Microsoft Defender Driver Exploited for Kernel-Level File Deletion
PremiumCheck Point shows Microsoft Defender's signed BTR.sys boot-time driver can be misused for kernel-level deletion of security files at boot.
Rust Crates Hit by Supply Chain Attack Revealing Build-Time Malware
PremiumMalicious Rust crate releases introduced build-time payloads, affecting widely used packages and prompting removals.
Friday, August 21
Wednesday, August 19
Microsoft Races to Patch ShieldBreak Zero-Day Vulnerability in Defender
Microsoft developing a Defender patch for ShieldBreak zero-day (CVE-2026-69414) disclosed by researcher 'Nightmare Eclipse'.
TWINLOOT Exploits Microsoft Services for Stealthy Credential Theft and Network Intrusion
TWINLOOT Python implant uses SharePoint and Teams to host C2, steal credentials, and pivot inside Microsoft tenant environments.
CISA Warns of Ransomware Abuse of Windows Task Host Vulnerability
CISA confirms ransomware groups are exploiting a high-severity Windows Task Host vulnerability previously flagged as actively exploited.
Monday, August 17
Friday, August 14
Federal Agencies Urged to Patch Critical Microsoft Vulnerability Amid North Korean Cyber Threat
PremiumCISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.
Lazarus Group Exploits Windows Zero-Day for Advanced Rootkit Deployment
PremiumLazarus exploits AFD.sys zero-day (CVE-2026-68820) to deploy FudModule rootkit for stealthy kernel persistence.
Microsoft Addresses Critical Windows Zero-Day Vulnerability
PremiumMicrosoft patched 'LegacyHive', a Windows zero-day vulnerability disclosed after July Patch Tuesday that allows privilege escalation.
New Zero-Day Exploit 'ShieldBreak' Elevates Threat Level for Windows Users
PremiumExploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.
Jewelbug APT: A Dual Threat in Cyber Espionage and Cryptocurrency Theft
PremiumJewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.
Microsoft Urges Immediate Action on Critical Windows Vulnerabilities
PremiumMicrosoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.
Get these articles delivered to your inbox.
Subscribe free