Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

July 15, 2026 at 11:00AM SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Acce…

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

July 15, 2026 at 01:55AM Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attac…

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

July 14, 2026 at 10:57PM Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks…

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

July 14, 2026 at 12:38PM A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a dis…

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

July 14, 2026 at 11:49AM Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walk…

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

July 13, 2026 at 11:06PM Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's ca…

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

July 13, 2026 at 10:47PM Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million …

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

July 13, 2026 at 04:32PM Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-co…

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

July 13, 2026 at 01:00PM An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a publ…

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

July 13, 2026 at 11:06AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security…

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

July 11, 2026 at 11:19PM Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several P…

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

July 11, 2026 at 12:15PM Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the C…