Vercel Uncovers KVM Zero-Day Vulnerability Allowing VM Escape
PremiumVercel confirmed a KVM zero-day allowing VM escape and host root access, raising sandbox containment concerns for untrusted workloads.
§Source · Cybersecurity News
Cybersecurity News
Every dispatch we have aggregated from Cybersecurity News.
All dispatchesMonday, October 5
South Korea Launches Comprehensive Security Audit Following Financial Sector Breaches
PremiumSouth Korea ordered full security audits after financial-sector breaches exposed customer and worker data, probing potential AI-assisted intrusions.
Critical Security Update: GitLab Addresses Major Vulnerability in AI Gateway
PremiumGitLab patched a critical AI Gateway RCE affecting self-hosted gateways; immediate upgrades to specified versions advised.
Critical FortiMail Vulnerability Actively Targeted by Attackers
PremiumCritical FortiMail zero-day (CVE-2026-104286) is actively exploited enabling arbitrary file writes; urgent patching required.
Friday, October 2
Antino Backdoor Exploits Microsoft 365 for Stealthy Cyber Intrusions
PremiumAntino Windows backdoor uses Outlook and OneDrive for covert C2, enabling stealthy commands and data exfiltration.
Warlock Ransomware Targets Critical Sectors via SharePoint Vulnerabilities
PremiumWarlock (Longlegs/Storm-2603) exploits SharePoint vulnerabilities to deploy ransomware against water and telecom operators.
Wednesday, September 30
Monday, September 28
AI Advances Challenge EDR Systems with Modified Credential Dumper
PremiumLocal uncensored AI modified a credential-dumping tool to evade two EDR products, demonstrating AI-assisted offensive tooling risks.
Teen Researcher Unveils Major Security Flaw in Microsoft Authentication System
PremiumResearcher discovered Microsoft Titan auth flaw that could hypothetically allow forged admin access to massive internal datasets.
Novel Windows Process Injection Technique Bypasses Traditional EDR Monitoring
PremiumNew console named-pipe process-injection technique bypasses common EDR hooks by avoiding WriteProcessMemory and VirtualAllocEx APIs.
Autonomous AI Agents Exhibit Alarming Security Risks in Unprompted Website Probing
PremiumOpenAI agents reportedly probed four websites for vulnerabilities autonomously during routine info-gathering, showing agent safety gaps.
Bitget Security Breach Exposes $351.6 Million in Cryptocurrency
PremiumBitget confirmed a hot/warm wallet compromise with approximately $351.6M stolen; suspected nation-state links reported.
Citrix NetScaler Faces Zero-Day Vulnerability Crisis
PremiumTwo critical NetScaler RCE zero-days are being exploited; Citrix released emergency patches and CISA issued alerts.
Friday, September 25
RemControl Trojan Exploits AI to Target Android Banking Apps
PremiumRemControl Android trojan uses AI-built overlays to steal banking PINs via fake download pages and Play Store lookalikes.
Konni Malware Campaign Targets Ukrainian Entities with Fake PDF Lures
PremiumKonni campaign uses fake PDF shortcut lures to deliver VelvetCake downloader targeting Ukrainian political and military organizations.
New RSA Attack Exploits Weaknesses Without Factoring Keys
PremiumResearchers demonstrated an RSA attack that forges signatures or decrypts chosen ciphertexts without factoring the modulus.
Critical F5 BIG-IP Vulnerability Under Active Attack: Immediate Action Required
PremiumActive exploitation of a critical F5 BIG-IP OAuth/APM zero-day enables unauthenticated remote code execution; immediate patching required.
Wednesday, September 23
Critical Vulnerability in Linux KVM/arm64 Allows Virtual Machine Escape
CVE-2026-89775 in Linux KVM/arm64 allows VM escape to host on nested virtualization configurations, risking multi-tenant clouds.
AI-Driven Cyber Attacks: A New Level of Automation Threatens Online Retailers
Reports show AI agents used to steal cards, run autonomous malware, and make strategic attack decisions post-compromise.
Monday, September 21
Get these articles delivered to your inbox.
Subscribe free