Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

July 20, 2026 at 10:59PM A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 f…

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

July 20, 2026 at 02:37PM A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operati…

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

July 20, 2026 at 10:45AM Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting…

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

July 20, 2026 at 02:12AM F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a he…

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

July 19, 2026 at 06:48PM A previously undocumented threat actor has been attributed to the exploitation of recently disclosed Son…

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

July 18, 2026 at 02:50AM An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with z…

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

July 18, 2026 at 01:50AM Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that n…

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

July 18, 2026 at 12:24AM Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite f…

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

July 17, 2026 at 02:16PM Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has be…

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

July 17, 2026 at 12:12PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched secur…

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

July 16, 2026 at 10:39PM Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown …

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

July 16, 2026 at 02:53PM Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on …