Collaborate Disseminate
Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and threat intelligence from a growing ecosystem of vendors and platforms.
Yet despite this abun… Continue reading Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber.
In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-… Continue reading Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS.
“The Windows variants discovered are internally marked as WIN_DRV and WIN_PLUS,” ESET said in a repo… Continue reading China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT.
“The attack email contained a me… Continue reading Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0.
“A vulnerab… Continue reading Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the … Continue reading CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email.
The way in was a backdoor on their REDCap research servers that sto… Continue reading Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi).
According to a report… Continue reading North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed
LiteLLM is a widely deployed open-source AI gateway that brokers calls … Continue reading LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search.
Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration … Continue reading One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes