Cyber Attack Alters French Blood Plasma Freezer Temperatures
PremiumAttackers altered temperature controls on blood plasma freezers via a cooling service provider, threatening stored transfusion products.
Friday, November 6
White House IP Addresses Misused for Anonymized Traffic Rental
PremiumResearchers found White House network IP addresses used as residential-proxy exits, enabling anonymized traffic rental and abuse.
Sogou Input Method Exploited by SlippyNunchucks in Cyberespionage Campaign
PremiumChina-aligned SlippyNunchucks abused Sogou Input Method to deploy DarkVigil backdoor to Windows victims across Asia.
Cyber Heist at French Bank Highlights Vulnerability in Financial Systems
PremiumAttackers stole 33m from Credit Mutuel Arke9a by compromising an authorized third party and moving funds into crypto.
Wednesday, November 4
Node-RED Vulnerability Actively Exploited to Deploy Malicious Payloads
Active exploitation of a critical Node-RED flaw attempted to deploy Linux bot binaries and webshells from same IP.
Hackers Exploit Microsoft Teams and AD CS Vulnerabilities to Breach Corporate Data
Threat actors used Teams social engineering and insecure AD CS to obtain privileged login certificates and compromise domain controllers.
AI-Powered ARTEX Framework Accelerates Cyber Attacks on Enterprises
ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.
Monday, November 2
Exposing the Risks of SS7 and Diameter Protocol Vulnerabilities
PremiumSS7 and Diameter signaling protocol flaws enable tracking, call/SMS interception and subscriber impersonation across mobile networks.
Trezor Alerts Customers to Potential Hardware Exploit in Wallets from CryptoBilis
PremiumTrezor Safe 5 purchased from reseller CryptoBilis may contain an implant that exfiltrates recovery phrases over mobile networks.
Nation-State Actor Exploits PAN-OS Vulnerabilities to Breach US Government Network
PremiumSuspected Chinese actor chained PHP2Shell to root Palo Alto firewall servers and target US government systems.
Massive Cybersecurity Breaches Uncover Vulnerabilities Across Industries
PremiumWeekly roundup covering DHS data leak, PHP2Shell active exploitation, Binance heist, AI threats, and mass web compromises.
Friday, October 30
Chinese Hackers Exploit Zero-Days via Covert Network Against U.S. Targets
PremiumVolt Typhoon operators used the covert 'Silent Train' network to conceal zero-day exploitation against US government and defense targets.
Critical Security Patches Released by Adobe, Veeam, and Juniper Networks
PremiumAdobe, Veeam and Juniper released patches addressing critical flaws that could allow code execution, auth bypass, and privilege escalation.
Binance Faces Major Security Breach, Halts Withdrawals Amidst Multi-Billion Dollar Crypto Theft
PremiumBinance paused withdrawals amid an investigation into a suspected multi-billion-dollar cryptocurrency theft impacting exchange liquidity.
Critical UEFI Firmware Vulnerability Puts Network-Booted Servers at Risk
PremiumEDK II UEFI CVE-2026-97631 allows pre-boot remote code execution on network-booting servers, affecting many data centers.
PHP2Shell Vulnerabilities Exploited in Global Cyber Attacks
PremiumPHP2Shell exploitation observed against internet-exposed management interfaces, with attackers chaining Linux kernel bugs for full compromise.
Cisco SD-WAN Vulnerability Exploited to Deploy KeyDrift Malware
PremiumState-linked actors exploited Cisco SD-WAN CVE-2026-20127 to deploy KeyDrift and steal encryption keys, threatening network confidentiality.
Wednesday, October 28
Critical UEFI Flaw Exposes Servers to Early-Boot Attacks
Critical EDK2 UEFI flaw allows early-boot code execution across a wide range of servers globally.
GoAhead TLS Vulnerabilities Threaten Millions of Devices
Three GoAhead TLS vulnerabilities in embedded web server risk certificate revocation bypass and session decryption across many devices.
Monday, October 26
Get these articles delivered to your inbox.
Subscribe free