Collaborate Disseminate
The Netherlands’ Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security flaws in Ivanti Endpo… Continue reading Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data
Fortinet has released security updates to address a critical flaw impacting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems.
The vulnerability, tracked as CVE-2026-21643, has a CVSS rating of 9.1 out of a maximu… Continue reading Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector.
“UNC3886 had launched a deliberate, targeted, and well-planned campaign against Singapor… Continue reading China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign
Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk (WHD) instances to obtain initial access and move laterally across the organization’s network to other … Continue reading SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers
Cyber threats are no longer coming from just malware or exploits. They’re showing up inside the tools, platforms, and ecosystems organizations use every day. As companies connect AI, cloud apps, developer tools, and communication systems, attackers are… Continue reading ⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More
Why do SOC teams keep burning out and missing SLAs even after spending big on security tools? Routine triage piles up, senior specialists get dragged into basic validation, and MTTR climbs, while stealthy threats still find room to slip through. Top CI… Continue reading How Top CISOs Solve Burnout and Speed up MTTR without Extra Hiring
The threat actor known as Bloody Wolf has been linked to a campaign targeting Uzbekistan and Russia to infect systems with a remote access trojan known as NetSupport RAT.
Cybersecurity vendor Kaspersky is tracking the activity under the moniker Stan Gh… Continue reading Bloody Wolf Targets Uzbekistan, Russia Using NetSupport RAT in Spear-Phishing Campaign
Cybersecurity researchers have called attention to a “massive campaign” that has systematically targeted cloud native environments to set up malicious infrastructure for follow-on exploitation.
The activity, observed around December 25, 2025, and descr… Continue reading TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
BeyondTrust has released updates to address a critical security flaw impacting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could result in remote code execution.
“BeyondTrust Remote Support (RS) and … Continue reading BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA
OpenClaw (formerly Moltbot and Clawdbot) has announced that it’s partnering with Google-owned VirusTotal to scan skills that are being uploaded to ClawHub, its skill marketplace, as part of broader efforts to bolster the security of the agentic ecosyst… Continue reading OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub Skills