In July 2026, several critical vulnerabilities were exploited, impacting SonicWall SMA1000 appliances and SharePoint servers. Two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, were discovered in SonicWall…
A moderate-scored IDOR vulnerability (CVE-2026-55255) in Langflow has been actively exploited since June 25, 2026, allowing attackers to access and execute flows belonging to other users. This exploit leverages a…
On July 13, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned First VPN Service (1VPNS), its administrator Dmytro Rashevskyi, and malware provider Yegeniy Vladimirovich Silayev for enabling…
Zimperium's zLabs has reported a significant increase in Android Banking Trojan activity, identifying four distinct campaigns: RecruitRat, SaferRat, Astrinox, and Massiv. These campaigns utilize advanced…
The Anubis ransomware group launched a cyberattack on the Adriatic Port Authority, crippling operations and causing significant disruptions in maritime logistics. The attack, attributed to Anubis in January 2026,…
Insikt Group identified GrayAlpha, a threat actor linked to FIN7, utilizing a custom loader named MaskBat to deploy NetSupport RAT through various infection vectors. These include fake browser update pages, fake 7-Zip…
AkzoNobel, a multinational paint company, has confirmed a cyberattack on one of its U.S. sites. The Anubis ransomware group claims to have stolen a large archive of sensitive personal and corporate documents, although…
On August 5, 2026, the City of Coweta experienced a system-wide ransomware attack that took most city computer systems offline. The attack affected all city computers and services, except for the city website and…
openSUSE has issued advisories for two moderate risk vulnerabilities identified as CVE-2025. The vulnerabilities affect the openSUSE distribution, specifically targeting components such as Anubis and…
BarNet, a communications provider for legal professionals, has been listed on the dark web by the SafePay ransomware group following a cyber attack that allegedly resulted in data theft. The incident has garnered…