NFC‑Enabled Android Malware Attacks Targeting Payment Systems CyberSecurity News CyberDefenderJanuary 7, 2026January 7, 20265 mins0 Chinese threat actors have been observed deploying a sophisticated Android malware that abuses Near-Field Communication (NFC) technology…continue reading..
CrazyHunter Ransomware targeted campaign against healthcare organizations CyberSecurity News CyberDefenderJanuary 7, 2026January 7, 20265 mins0 Advanced Techniques Used by CrazyHunter 1. Developed in Go with Enhanced Evasion 2. Bring-Your-Own-Vulnerable-Driver (BYOVD) Exploitation 3.…continue reading..
Threat Actors Exploit Office Assistant to Deliver Malicious Mltab Browser Plugin CyberSecurity News CyberDefenderJanuary 7, 2026January 7, 20265 mins0 A sophisticated malware campaign has been uncovered that leverages a popular AI-powered productivity application to distribute a…continue reading..
CVE-2025-14026 discovered Forcepoint’s Data Loss Prevention (DLP) client Threat Advisories CyberDefenderJanuary 7, 2026January 7, 20267 mins0 In the world of cybersecurity, sometimes the biggest risks aren’t from external attacks — they come from…continue reading..
CVE-2026-0650: Critical Authentication Bypass Exposes OpenFlagr Control Plane Vulnerabilities AegironJanuary 7, 2026January 7, 20268 mins0 CVE ID: CVE-2026-0650Affected Product: OpenFlagr – FlagrImpacted Versions: All versions up to and including 1.1.18CVSS v3.1 Score:…continue reading..
CVE-2026-0628: WebView Policy Bypass in Android & Chrome Enables Unauthorized Script Execution Vulnerabilities AegironJanuary 7, 2026January 7, 20267 mins0 Product: Android System WebView / Google Chrome (WebView component)Vendor: GoogleCVE ID: CVE-2026-0628CVSS v3.1 Score: 8.1 (High)Severity: HighAttack…continue reading..
Multiple RCE and Privilege-Escalation Vulnerabilities in Veeam Backup & Replication (January 2026) Threat Advisories CyberDefenderJanuary 7, 2026January 7, 202618 mins0 On 6–7 January 2026 Veeam published fixes for four vulnerabilities in Veeam Backup & Replication (13.x builds…continue reading..
TridentLocker Strikes Again: How a Quiet Credential Compromise Led to a 3.4GB Data Theft Cyber Threat Intelligence AegironJanuary 7, 2026January 7, 202610 mins0 Incident Name: TridentLocker Ransomware Data TheftDate of Disclosure: January 7, 2026Target Organization: Sedgwick Government SolutionsAttack Type: Ransomware…continue reading..
One Click Is Enough: Commodity Loader Emails Quietly Opening the Door to Full System Takeovers Cyber Threat Intelligence AegironJanuary 7, 2026January 7, 20269 mins0 Executive Summary A large-scale malicious email campaign, now commonly referred to as the Commodity Loader Campaign, has…continue reading..
Microsoft Cancels Planned Exchange Online Bulk Email Limit CyberSecurity News CyberDefenderJanuary 7, 2026January 7, 20263 mins0 Microsoft has canceled indefinitely its previously planned daily limit on the number of external recipients Exchange Online…continue reading..
