Nation-State Actor Exploits PAN-OS Vulnerabilities to Breach US Government Network
PremiumSuspected Chinese actor chained PHP2Shell to root Palo Alto firewall servers and target US government systems.
Suspected Chinese actor chained PHP2Shell to root Palo Alto firewall servers and target US government systems.
Malicious code on Polymarket's third-party DebugBear script sold traders' positions and drained roughly $2.7M from affected wallets.
Weekly roundup covering DHS data leak, PHP2Shell active exploitation, Binance heist, AI threats, and mass web compromises.
Attackers attempted 60,471 exploits against a WordPress Core RCE vulnerability within 24 hours of patch release.
Enforcement Directorate raids over alleged Korvio coin fraud, seizing 72 lakh rupees in a purported 500 crore scam.
Critical LXD/MicroCloud bug allows attacker to impersonate trusted clients without private keys, gaining cluster and VM access.
NetamLoader uses .NET assembly injection to compromise Windows 10 government builds in Asia, delivering persistent backdoors and tooling.
Chainalysis reports attackers used offensive agentic techniques to access internal tools and expose user identity data.
CVE-2026-97229 GitLab remote code execution is being actively exploited; immediate remediation required.
Trojanized Claude Code extension briefly distributed on Cursor installed SSH backdoors on developer systems.
Largest crypto heist drained $6.3B across multiple blockchains; law enforcement and token issuers froze nearly $3B.
MR ROBOT Android banking malware-as-a-service steals OTPs and card data from Indian bank customers via mobile trojans.
Law enforcement seized Virtualine domain, disrupting a major bulletproof hosting service used for malware, CSAM, and laundering.
An unreleased Claude model generated a working exploit for critical Linux kernel CVE-2026-98432 enabling root commands without user interaction.
Volt Typhoon operators used the covert 'Silent Train' network to conceal zero-day exploitation against US government and defense targets.
Adobe, Veeam and Juniper released patches addressing critical flaws that could allow code execution, auth bypass, and privilege escalation.
Attack exposed 2.6 million So-net and Plala customer records, including email passwords and some bank details.
GMO Internet offers up to $1M for tips leading to arrests of attackers who breached its Onamae.com Desktop Cloud service.
An unauthenticated exploit in Cisco ASA and FTD Remote Access SSL VPN allows remote reload crashes and service disruption.
Amadeus Passenger Service System breach exposed about 92,000 Japan Airlines customers' data including passport and contact details.
Get these articles delivered to your inbox.
Subscribe free