Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Cisco has disclosed a critical vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via a flaw in an API endpoint. This vulnerability has a CVSS score of 10.0 and is actively being exploited in the wild, prompting...
Cybercriminals are exploiting interest in Agentic AI by creating fake AI trading agents to lure crypto users into downloading malware. This malware, known as Needle Stealer, replaces legitimate browser wallet extensions like MetaMask and Coinbase with malicious versions that capture user credentials...
A phishing campaign is targeting OpenAI users with fake billing emails claiming an outstanding balance of $23.80. The emails, which appear to come from a legitimate ChatGPT address, urge users to update their payment information to avoid service interruption. The malicious email includes a button th...
On September 15, 2026, the FBI seized the domains of NightmareStresser, a notorious DDoS-for-hire service linked to hundreds of thousands of attacks since 2022. This operation, part of the ongoing Operation PowerOFF, targeted infrastructure enabling users to launch distributed denial-of-service atta...
