Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

August 19, 2026 at 11:09AM A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in …

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

August 18, 2026 at 10:28PM A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to vi…

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

August 18, 2026 at 02:33AM GitLab has released security updates to address a critical vulnerability impacting its Community Editi…

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

August 18, 2026 at 12:14AM Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability …

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

August 17, 2026 at 11:11PM Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-c…

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

August 13, 2026 at 05:15PM Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT worke…

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

August 13, 2026 at 11:39AM Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the…

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

August 12, 2026 at 11:09PM The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation …

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

August 12, 2026 at 12:38AM Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, a…

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

August 12, 2026 at 12:06AM The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engine…

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

August 11, 2026 at 02:46PM Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attac…

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

August 11, 2026 at 12:25PM Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat a…