CISA Flags Actively Exploited CVE-2024-43468: Critical Unauthenticated SQL Injection in Microsoft Configuration Manager Enables Remote Code Execution
In late 2024 a critical security vulnerability affecting Microsoft Configuration Manager—Microsoft’s widely-used systems management product (formerly SCCM…
continue reading..
Trusted Outlook Add-In Hijacked, 4,000 User Credentials and Payment Details Stolen in Phishing Scheme
A recently uncovered cybersecurity incident has revealed a malicious attack carried out through a trusted Microsoft Outlook…
continue reading..
CISA Flags Actively Exploited Flaws in Microsoft ConfigMgr, SolarWinds Web Help Desk, Notepad++, and Apple Devices
On February 12–13, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities…
continue reading..
Windows LNK Spoofing Techniques Spark Debate as Microsoft Dismisses Findings as “Not Vulnerabilities”
Windows shortcut files ending in .LNK are a long-standing feature of the Windows operating system, introduced originally…
continue reading..
Odyssey Stealer Targets macOS Users in Sophisticated Crypto-Theft Campaign, Security Researchers Warn
Malware targeting macOS systems, once considered comparatively safe relative to Windows, has grown significantly more sophisticated, with…
continue reading..
Ukrainian Malware Operator’s Fake Death Plot Unravels in January’s “Dark Web Roast,” Exposing Chaos Inside Cybercrime Circles
Welcome to the first Dark Web Roast of 2026 published by trelix— a monthly undercover look at…
continue reading..
CVE-2026-25728: Critical ClipBucket v5 Flaw Allows Unauthenticated Remote Code Execution via Upload Race Condition
ClipBucket v5 – TOCTOU Race Condition → Remote Code Execution (RCE) CVE ID: CVE-2026-25728Affected Product: ClipBucket v5…
continue reading..
Microsoft February 2026 Patch Tuesday: 58 Vulnerabilities Fixed, 6 Actively Exploited Zero-Days Addressed
Microsoft released its monthly Patch Tuesday security updates, addressing 58 vulnerabilities across Windows, Azure, Office, developer tools,…
continue reading..
Nation-State Hackers Escalate Cyber Campaigns Against Global Defense Industrial Base, Threat Intelligence Warns
As conflicts and geopolitical tensions evolve, so too do the methods adversaries use to advance strategic objectives.…
continue reading..
