Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

August 13, 2026 at 11:39AM Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the…

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

August 12, 2026 at 11:09PM The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation …

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

August 12, 2026 at 12:38AM Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, a…

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

August 12, 2026 at 12:06AM The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engine…

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

August 11, 2026 at 02:46PM Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attac…

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

August 11, 2026 at 12:25PM Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat a…

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

August 11, 2026 at 11:18AM Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor B…

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

August 10, 2026 at 10:08PM Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has dep…

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

August 10, 2026 at 05:03PM The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf…

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

August 10, 2026 at 01:08PM Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension na…

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

August 10, 2026 at 11:20AM OpenAI has announced that it's pausing some "internal activities" involving its upcoming…

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

August 8, 2026 at 12:22PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity se…