Collaborate Disseminate
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors … Continue reading Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (a… Continue reading SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities… Continue reading Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, market… Continue reading FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed… Continue reading Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports… Continue reading Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads.
Tracked as CVE-2026-66066 (CVSS score: 9.5), the flaw ca… Continue reading Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution.
The vulnerability, tracked as C… Continue reading Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity.
The first of the three critical-rated flaws is CVE-2026-5930… Continue reading Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response.
Braham, Plymouth, South St. Paul and Maple Plain have publicly described a pl… Continue reading Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline