CISA Warns of Active Exploitation of Newly Patched Roundcube Webmail Flaws, Urges Immediate Updates
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially classified two recently patched vulnerabilities in Roundcube…
continue reading..
CVE-2026-2033: Critical Unauthenticated RCE Discovered in MLflow Tracking Server — Remote Attackers Can Execute Code Over the Network
MLflow Tracking Server – Unauthenticated Remote Code Execution CVE ID: CVE-2026-2033Affected Product: MLflow Tracking ServerVulnerability Type: Path…
continue reading..
Crypto Users Targeted by Sophisticated Mail-Based Phishing Scam, Security Researchers Warn
In early 2026, a wave of phishing scams reached cryptocurrency hardware wallet users through an unusual delivery…
continue reading..
Malicious npm Package Hides .NET RAT Inside Innocent-Looking Images, Researchers Warn
The npm ecosystem underpins millions of JavaScript and TypeScript projects worldwide, providing reusable modules via the Node…
continue reading..
Fake CAPTCHA ClickFix Campaign Uncovered: Cybercriminals Deploy In-Memory Infostealer via PowerShell and Process Injection
A recent targeted campaign leveraging fake CAPTCHA pages—part of the broader ClickFix social engineering technique—was investigated by…
continue reading..
AI-Augmented Hackers Compromise Hundreds of FortiGate Firewalls in Global Credential Abuse Campaign
The evolution of generative AI from a niche research topic to mainstream commercial services has enabled a…
continue reading..
Predator Spyware Bypasses iPhone Privacy Indicators to Hide Camera and Mic Activity
Researchers have uncovered a troubling new capability being used by Predator spyware — commercial surveillance software that…
continue reading..
CISA Flags Actively Exploited Roundcube Webmail Flaws, Adds Critical RCE and XSS Bugs to KEV Catalog
Recently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) Catalog with…
continue reading..
Massive Winos 4.0 Malware Campaigns Strike Taiwan, Leveraging Phishing and Kernel-Level Evasion Tactics
Recent threat intelligence reveals multiple coordinated phishing campaigns targeting organizations in Taiwan using the Winos 4.0 malware…
continue reading..
