Ransomware Groups Exploiting Palo Alto VPN Vulnerability
PremiumRansomware groups exploit Palo Alto GlobalProtect authentication bypass (CVE-2026-0257) to create unauthorized VPN sessions and access internal networks.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, October 12
Friday, October 9
Global Cybersecurity Advisory Exposes China-Linked Threats
PremiumUK NCSC and partners publish advisory calling out China-linked actors targeting sensitive data across multiple sectors worldwide.
ASOS Data Breach: Social Engineering and Credential Theft Uncovered
PremiumASOS links customer data exposure to social engineering that led to stolen employee credentials and unauthorized notifications to customers.
Malicious Firefox Extensions Exploit Wallet Vulnerabilities to Steal Crypto
PremiumCluster of 16 malicious Firefox extensions intercept wallet import flows to steal cryptocurrency recovery phrases and private keys.
U.S. Seeks Information on Chinese National Charged in Major Cyber Attacks
PremiumUS State Department offers up to $10M for information locating Zhang Yu, charged over the 2021 Hafnium Exchange Server attacks.
MonsterCloud's Owner Charged with Fraud for Secretly Paying Ransoms
PremiumDoJ charged MonsterCloud owner Zohar Pinhasi for wire fraud, alleging secret ransom payments and overbilling of victims.
Cyber Attackers Breach ccTLDs to Forge Google Domain Certificates
PremiumAttackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates for several Google domains, enabling impersonation.
SonicWall Releases Critical Patch for SMA1000 SSRF Vulnerability
PremiumSonicWall released hotfixes for four SMA1000 flaws; most serious was a CVSS 10.0 pre-auth SSRF potentially reaching internal functions.
Critical LMCache Vulnerability Exposes Servers to Remote Code Execution
PremiumCritical unauthenticated RCE in LMCache (LLM cache servers) allows remote code execution; no fixed version available yet.
Critical AWS Vulnerability 'AgentCorruption' Threatens Cloud Security
PremiumPatched AWS Bedrock AgentCore vulnerability could allow a single malicious prompt to compromise an entire agent fleet; patch available.
Wazza Phishkit: A New Threat to Banking, Government, and Manufacturing
PremiumWazza phishkit delivers advanced session management and filtering to target banking, government, and manufacturing, improving credential harvesting success.
Surge in Exploitation Attempts on Hikvision Cameras Triggers Security Concerns
PremiumIncreased scanning and RCE attempts targeted unpatched Hikvision CVE-2021-36260 surveillance devices, especially in Ukraine.
AI Poses New Threats to Cryptocurrency Security, Vitalik Buterin Warns
PremiumVitalik Buterin warns AI-driven mathematical breakthroughs could undermine cryptocurrency wallet security and even quantum-resistant schemes.
Congress Raises Privacy Concerns Over Google-Spirit Data Deal
PremiumLawmakers warn a proposed Google-Spirit AI training deal could include 100M emails and 500M Teams messages, risking sensitive exposure.
Sungrow Inverter Flaw Exposed Solar Plants to Unauthorized Access
PremiumCritical Sungrow inverter flaw allowed access to iSolarCloud without valid passwords, risking control of solar plants and battery systems.
Advanced Malware Targeting Ukrainian Sectors: A New Threat from Russian-Aligned Hackers
PremiumRussia-aligned actors refined malware targeting Ukrainian transportation, manufacturing and energy sectors to harvest system instrumentation and data.
Uranium Crypto Exchange Hacker Sentenced for $53 Million Theft
PremiumA Maryland man convicted for two hacks of Uranium Finance, stealing over $53M from the decentralized exchange in 2021.
Oracle Health Data Breach Exposes Nearly 20 Million Records
PremiumOracle Health breach tally grows to nearly 20 million patient records, widening regulatory and remediation scope.
Atlassian Data Center Vulnerability Under Exploitation
PremiumCritical CVE-2026-21589 in Atlassian Data Center products is being targeted within hours of PoC publication.
Tensorlake npm Package Compromise Exposes Developer Secrets
PremiumMalicious tensorlake npm release deploys Shai-Hulud worm stealing developer secrets and spreading through developer systems.
Get these articles delivered to your inbox.
Subscribe free