CVE-2026-2441 is a zero-day CSS vulnerability affecting all Chromium-based browsers, allowing attackers to exploit a use-after-free condition in the Blink rendering engine. This vulnerability enables the theft of…
A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…
Water and wastewater systems are increasingly targeted by Russia, China, and Iran due to poor operational technology defenses. Exposed human-machine interfaces and programmable logic controllers create vulnerabilities…
The FBI has issued a warning regarding the Kali365 phishing kit, which is actively stealing Microsoft OAuth tokens and bypassing multi-factor authentication (MFA) protocols. First identified in April 2026, Kali365 is…
Google has filed a lawsuit against the 'Outsider Enterprise', a China-based cybercrime network, for allegedly using AI tools, including its Gemini platform, to conduct large-scale phishing operations. The operation has…
A recent study identified 28 malicious LLM proxy routers that can modify AI service responses and access sensitive credentials. The research tested 28 paid routers and 400 free routers, revealing that nine injected…
Scammers are exploiting the excitement around Celine Dion's concert comeback, targeting fans with fraudulent ticket sales. Group-IB has identified multiple scam campaigns operating on social media and fake websites that…
Ledger, a crypto wallet firm, is experiencing a data breach linked to its third-party payment processor, Global-e. Customer data may have been exposed during this incident, which raises concerns about the security of…
A significant outage at Cloudflare has resulted in numerous major websites and applications going offline. The incident has particularly impacted financial services firms that rely on Cloudflare's network and security…
On November 18, 2025, Cloudflare experienced a significant outage that affected access to numerous major websites, including ChatGPT and X. The disruption was caused by a change to database access controls, which led to…