Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro
A sophisticated phishing campaign dubbed “CodeStorm” is leveraging compromised Microsoft 365 accounts to launch large-scale credential harvesting attacks. Attackers are exploiting trusted email relationships and M365 infrastructure to bypass security controls, targeting organizations across multiple
Healthcare technology company Xsolis disclosed a data breach affecting approximately 1.4 million individuals after attackers gained unauthorized access through a successful phishing campaign. The breach compromised sensitive patient information including names, dates of birth, Social Security number
A critical vulnerability (CVE-2026-42530) has been discovered in NGINX’s HTTP/3 implementation that allows unauthenticated attackers to trigger denial-of-service conditions and potentially achieve remote code execution. The flaw affects NGINX versions 1.25.0 through 1.26.3 with HTTP/3 enabled, stemm
ShapedPlugin’s premium WordPress plugins were compromised through a supply chain attack, with malicious actors injecting credential-stealing backdoors into legitimate plugin updates. The attack affected multiple Pro versions of popular plugins, silently exfiltrating WordPress administrator credentia
CVE-2024-40766 has been patched by vendors, but organizations remain vulnerable due to insecure default configurations and legacy settings that persist post-patch. This vulnerability highlights a critical gap in security hygiene: patches address code flaws, but misconfigured systems continue exposin
The AryStinger botnet has compromised thousands of D-Link routers worldwide, exploiting known vulnerabilities in end-of-life devices. Threat actors are leveraging weak credentials and unpatched security flaws to build a distributed network capable of launching DDoS attacks, distributing malware, and
A critical remote code execution (RCE) vulnerability in Google Cloud’s production infrastructure (CVE-2026-2031) has been patched following responsible disclosure by a security researcher who earned $148,337 through Google’s Vulnerability Reward Program. The flaw allowed authenticated attackers to e
A critical namespace vulnerability affecting major cloud service providers enables attackers to hijack abandoned storage bucket names, potentially intercepting sensitive data from applications still referencing those resources. This technique exploits the global namespace model used by AWS S3, Azure
Attackers are exploiting AI memory mechanisms to inject malicious prompts, exfiltrate sensitive data, and manipulate model behavior in Microsoft’s AI-powered applications. This emerging threat vector targets the persistent memory features in AI assistants, allowing adversaries to poison conversation