UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

August 7, 2026 at 11:46PM A recent wave of cyber attacks targeting financial services, private equity, and professional services …

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

August 7, 2026 at 01:48PM A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI …

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

August 7, 2026 at 12:20PM A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime…

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

August 6, 2026 at 10:43PM Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst S…

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

August 6, 2026 at 12:21PM A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active…

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

August 6, 2026 at 11:34AM Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud,…

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

August 6, 2026 at 12:03AM OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligen…

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

August 5, 2026 at 02:53PM A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate develop…

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

August 5, 2026 at 01:10PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws …

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

August 5, 2026 at 11:17AM Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain …

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

August 4, 2026 at 04:06PM cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's …

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

August 4, 2026 at 02:33PM A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to …