Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware
Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure. Ever...
general
20 articles
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild
Attackers are actively exploiting a maximum severity SAP Commerce Cloud vulnerability, tracked as CVE-2026-58231, just days after SAP released a patch. A cri...
New Evooo1Bot Linux botnet turns routers into traffic relay nodes
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay no...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-5823...
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners
Hackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online. The Dutch National Cy...
Microsoft Entra ID Makes Passkeys Default, Retires SMS and Voice MFA in 2027 for Better Security
Microsoft will make passkeys the default authentication experience in Entra ID beginning September 1, 2026, and will fully retire its native SMS and voice mu...
Ruby 4.0 Marshal.load RCE Gadget Chain Exposes Critical Deserialization Risk
A newly disclosed universal deserialization gadget chain shows how a single unsafe Marshal.load operation can reportedly produce remote command execution in ...
Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender
A newly disclosed Windows attack technique, dubbed “Download More RAM,” can undermine Virtualization-Based Security (VBS), bypass Hypervisor-Protected Code I...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyb...
Microsoft Copilot App Overhaul Merges Personal Chats and Ends Podcasts, Deep Research
Microsoft is reshaping its consumer and productivity AI strategy with a major update to its Copilot application, merging personal chat histories and generate...
GeoServer Zero-Day Is Already Being Probed. That’s the Problem
GeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems. A newly disclosed GeoServer...
MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control
A fake GitHub download page hosts the malicious ClickFix command.
How Anthropic plans to watermark Claude's AI-generated text
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and ...
Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught
How proactive prioritization will save time and effort when your team faces a wave of AI-discovered vulnerabilities.
Trezor confirms shipping partner data breach affecting over 13,000 customers
While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.
U.S. judiciary to publicly disclose use of hacking tools in wiretaps starting 2029
Starting with the 2028 Wiretap Report, which will be published in 2029, the judiciary will include data on network investigating techniques.
California launches AI cybersecurity initiative amid growing threats
The initiative mandates the creation of an AI cybersecurity officer role within every state agency and establishes an AI cyber defense program housed in the ...
Cybercriminals invest millions in expired domains for illicit activities
These "dropcatch" domains are attractive to threat actors because they retain trust, backlinks, and web traffic from their previous legitimate use, making th...
MacOS screen sharing vulnerability actively exploited for crypto mining
The vulnerability, identified as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a flaw in macOS' screen sharing capability.
ExfilSquad data extortion group linked to 13 victim data leaks
ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.