Bing Images Vulnerabilities 🚨 A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machin...
Thailand’s Ministry of Finance Targeted with Hermes AI 🚨 Hunt.io has uncovered a cyber-espionage attack on Thailand’s Finance Ministry using the Hermes AI agent and Hades malware for reconnaissanc...
Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials A widespread DNS poisoning campaign is targeting hotels, conference venues, and the hospitality sector with credential harvesti...
WhatsApp Web Chats Exposed by Adobe’s Acrobat Extension Flaw 🚨 A recently disclosed vulnerability, known as HermeticReader, has put WhatsApp Web chats at risk due to a flaw in the Adobe Acrobat PD...
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Data Breach Exposes Client Information at Origin Energy 🚨 Australian energy provider Origin Energy has confirmed a data breach by an unknown threat actor that exposed customers’ personally identif...
Overview 🚨 Proofpoint has uncovered that the Russia-aligned threat actor TA488 (also known as Void Blizzard or Laundry Bear) has been exploiting a previously unknown vulnerability in Zimbra mailse...
TA458 Roundpress Exploits: A New Threat in Webmail Security 🚨 The Russia-aligned threat actor TA458, known for its involvement in Operation RoundPress, continues to target webmail services using i...
New Dolphin X Malware Uses AI to Rank High-Value Targets 🚀 A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercrimina...
Major Security Flaw in KARR Security System 🚗🔒 A recent investigation has revealed a significant security flaw in the KARR Security System, a Bluetooth-enabled aftermarket alarm installed in milli...
MZ Automation libIEC61850 Vulnerabilities Exposed 🚨 Critical Alert! Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC ...
Upbound Hack Results in $13 Million Fraudulent Acima Leases 🚨 The Upbound Group, a fintech company, has revealed that a recent cyberattack led to the creation of $13 million in fraudulent Acima le...
Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack 🚆💰 Swiss rail vehicle manufacturer Stadler Rail has made headlines after the Everest ransomware gang demanded approximately ...
Oracle Hospitality Simphony Multiple Vulnerabilities Discovered 🚨 Oracle’s July 2026 Critical Patch Update addresses four remotely exploitable vulnerabilities affecting Oracle Hospitality Simphony...
CISA, FBI, EPA and U.S. Government Partners Update The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Environmental Protection Agency (EPA), and ot...
Chick-fil-A Loyalty Accounts Hijacked Using Stolen Passwords 🚨 Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stu...
Opening the Black Box: Agentless Threat Detection for Virtual Appliances Virtual appliances are common in the cloud, with 51.9% of cloud environments having at least one virtual appliance. 🚀 46.4%...
INC Ransomware Affiliate Targets ESXi & NAS Devices in AD Environment 🚨 Using the Hunt.io platform, Ctrl-Alt-Intel researchers discovered an exposed operator working directory containing evide...
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569) 🚨 The Unified Threat Advisory is a coordinated Cyber Intelligence effort led by Ransom-ISAC, in collaboration with eCrime.ch and D...
Vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2 🚨 Attention! Recent vulnerabilities have been disclosed in Tycon Systems TPDIN-Monitor-WEB2 that could lead to serious security risks. Successfu...