🚨 Fake Google and Cloudflare Verification Pages Spread Multiple Malware Families Source: Malwarebytes Date Published: July 2, 2026 ClickFix attacks, which trick people into running malicious comm...
Alleged Scattered Spider Hacker Arrested in Finland 🚨 A teenager has been arrested for alleged involvement with the Scattered Spider hacking group, the US Department of Justice (DOJ) has announced...
Agentic Ransomware JADEPUFFER Invades Database at Machine Speed 🚀 Sysdig researchers have discovered the first instance of an “agentic ransomware” attack in the wild, dubbed JADEPUFFER. This agent...
WinRAR Vulnerability Alert 🚨 Rarlab has released a new version of the popular WinRAR tool to patch a vulnerability that can be abused in remote code execution attacks. The issue is fixed in WinRAR...
ST Engineering iDirect iQ-Series Terminals Vulnerabilities 🚨 Date Published: July 2, 2026 Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to d...
CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials 🚨 Attention: Gardyn devices expose a privileged iothubowner key. Access to this key allows a malicious user to invoke an IoTHub Regist...
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS 🚀 A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured se...
New ChocoPoC Malware Targets Researchers 🚨 A new threat has emerged in the cybersecurity landscape! Multiple weaponized proof-of-concept (PoC) exploits on GitHub have been discovered delivering a ...
Kubota Hackers Had Month-Long Access to Network Systems 🚨 Kubota North America Corporation disclosed that hackers had access to some of its network systems for more than a month earlier this year....
Hackers Breached DHS Information-Sharing Network 🚨 A key Department of Homeland Security (DHS) information-sharing database was accessed by an unknown threat actor in recent weeks, potentially exp...
Chrome Needs Another Whopper Update to Fix 382 Security Bugs 🚀 Yesterday, on the last day of June, Google published an update that includes a whopping 382 security fixes for Chrome. The stable cha...
Brazilian Banking Trojan Ousaban Targets Spain and Portugal A banking trojan long used against victims in Brazil has been retooled to target banking customers in Spain and Portugal, using phishing...
Why Are WordPress Sites Still Running EOL PHP? Despite PHP updates being freely available, a large number of websites are not maintaining the latest patches, making them prime targets for attacker...
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS 🚀 A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured se...
Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique Source: Checkpoint Research Date Published: July 1, 2026 AI can turn high-level malicious ideas into concrete tech...
Vulnerabilities in OFFIS DCMTK Toolkit The OFFIS DCMTK Toolkit has been found to have several vulnerabilities that could be exploited by attackers. 🚨 Key Vulnerabilities: CVE-2026-50003: A pat...
StoneFly Storage Concentrator Vulnerabilities Exposed 🚨 Critical Security Alert! 🚨 Successful exploitation of these vulnerabilities could allow attackers to gain broad unauthorized access, execut...
RPG Maker MV and MZ Vulnerable to OS Command Injection 🚨 RPG Maker MV and MZ, provided by Gotcha Gotcha Games Inc., contain a critical OS command injection vulnerability. These game development to...
Mitsubishi Electric MELSOFT Update Manager Vulnerabilities 🚨 Mitsubishi Electric has announced critical vulnerabilities in the MELSOFT Update Manager SW1DND-UDM-M. Successful exploitation of these...
Delta Electronics DVP12SE PLC Vulnerabilities 🚨 Source: CISA Date Published: June 30, 2026 Successful exploitation of these vulnerabilities could allow an attacker to remotely issue commands, mod...