T1021 - Remote Services

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Critical WSO2 API Manager Vulnerability Under Active Exploitation

Red Heron Exploits Gitea RCE Flaw in Multinational Campaign

Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation

F5 Issues Critical Patches for NGINX Vulnerabilities Allowing Remote Code Execution

Critical Buffer Overflow Vulnerability in Silex Devices (CVE-2026-32956)

Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild

Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies

Storm-1175 Deploys New StormEncryptor Ransomware Targeting N-central Systems

Critical Check Point VPN Vulnerability Exploited by Ransomware Gang

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway

Operation Escaneo Targets Latin American Critical Infrastructure

Critical RCE Vulnerability Discovered in TACACS+ Protocol

AI-Driven Cyber Attacks Targeting Critical Infrastructure and Data Security

Mirage Kitten Targets Aviation and FinTech with New Cross-Platform Malware

Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

CISA Urges Endpoint Security Enhancements After Stryker Cyberattack

North Korean Hackers Deploy Mac Backdoors via Fake Job Tests Targeting IT Firms

TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper

Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks

Armored Likho APT Targets Power Grids with BusySnake Stealer Malware

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks

Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe

APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign

NightEagle APT Targets Russian Enterprises with Advanced Malware

Fire Ant Threat Actor Targets Trusted Infrastructure in 2026

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

Cyberattack on Polish Energy Sector Exploits Private APN Vulnerability

Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants

Coordinated Cyberattack Disrupts Water Utilities in Minnesota

FBI Seizes Iranian Hacktivist Group Websites After Stryker Cyberattack

Kelp DAO Suffers $292 Million Loss in LayerZero Exploit Linked to Lazarus Group

Surge in Blockchain Dead Drops Driven by AI Models

CISA Releases Zero Trust Guidance for Securing OT Against Cyber Threats

Iranian Hackers Disable UK Power Plant for Four Days

MikroTik RouterOS Vulnerabilities Under Active Exploitation

Ryuk Ransomware

Extradited Armenian National Sentenced Over Ryuk Ransomware Scheme

ShinyHunters claims FBI breach and data theft

ShinyHunters claims FBI hack, data theft in PeopleSoft zero

Red Heron Exploits Gitea N Day Flaw In Multinational Campaign Exposing New Linux Rootkit

Another worry for water systems: infostealer exposure

venom exploit

More CVEs than ever. The same old ones keep getting exploited.

Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers

MalSCCM exploit

CVE Alert: CVE-2026-94128 – BioStar

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

Security flaws in top-selling BYD EV

We got a cybersecurity expert to hack this BYD. It was too easy

16

CVE Alert: CVE-2026-93969 – aiyiyi121

Google Gemini Agent Breached Three Real Companies After Escaping Test Environment

Quest Secure Migration

CVE Alert: CVE-2026-81669 – IBM

Settra Ransomware Ttps Victims And Defense Guide

Google Gemini Model First Autonomously Attacks Enterprise Systems

CVE Alert: CVE-2025-39682 – Linux

Smarter MSP

Exploiting The Edge Vulnerabilities In The Siemens Scalance Lpe9403

[ENDZONE] – Ransomware Victim: AT&T

Hugging Face Model Evaluation Security Incident

Isolation

CVE Alert: CVE-2026-92980 – danielbrendel – hortusfox

CVE Alert: CVE-2026-20335 – Cisco – Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Glupteba Campaign Hits Network Routers And Updates Cc Servers With Data From Bitcoin Transactions

Druva Brings Behavioral Intelligence to Cyber Recovery with New Identity and Ransomware ...

At The Edge Clear 091426

The AI Cybersecurity Arms Race Is Upon Us — Here's How to Play It

Sysdig observed that

Ercan Havalimaninda Ekranlar Hacklendi

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

NightEagle APT targets Russian organizations

Northern Cyprus airport's digital advertising screens hacked

Coast Guard, FBI boarded Texas

Patched VMware vCenter bug targeted in ransomware campaigns | news

AntiBrok3rs