Qilin ransomware affiliates are actively exploiting CVE-2026-0257, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. The flaw allows attackers to gain unauthorized VPN access without credentials, establishing initial network footholds for ransomware dep
Microsoft SharePoint Server is under siege from active exploitation of CVE-2026-50522, a critical remote code execution vulnerability with a CVSS score of 9.8. Following the public release of proof-of-concept code, threat actors are weaponizing this flaw to compromise unpatched SharePoint instances.
The wp2shell exploit framework is actively targeting WordPress installations through malicious file upload vulnerabilities, enabling attackers to establish persistent web shells on compromised servers. Visitors to infected sites face risks including malware distribution, credential theft, and browse
Multiple AsyncAPI npm packages were compromised when attackers exploited GitHub Actions workflows to inject Miasma RAT malware. The supply chain attack affected several widely-used packages, exposing thousands of downstream users to remote access trojans. The threat actors leveraged compromised GitH
The Qilin ransomware group is actively exploiting CVE-2024-21893, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. This flaw allows attackers with network access to execute arbitrary code with root privileges on vulnerable firewalls. Organizations runn
A critical zero-day vulnerability in Windows’ LegacyHive component is being actively exploited in the wild, allowing attackers to escalate privileges and gain SYSTEM-level access. With no official Microsoft patch available, security researcher collective 0patch has released free, unofficial micropat
Threat actors are leveraging Telegram bots as command-and-control (C2) infrastructure to maintain persistent backdoor access to government networks across the Middle East. This sophisticated campaign uses encrypted messaging channels to remotely execute commands, exfiltrate sensitive data, and evade
Threat actors are actively exploiting a critical vulnerability in Palo Alto Networks’ PAN-OS to deploy Qilin ransomware across enterprise networks. The vulnerability enables unauthenticated remote code execution on internet-facing management interfaces, allowing attackers to establish persistent acc
Two critical vulnerabilities in WordPress Core (CVE-2026-60137 and CVE-2026-63030) are being actively exploited in the wild through a campaign dubbed “WP2Shell.” These flaws allow unauthenticated attackers to achieve remote code execution and complete site takeover on millions of WordPress installat
A massive malware distribution campaign dubbed “FakeGit” has weaponized approximately 7,600 GitHub repositories to deliver SmartLoader malware. Attackers are exploiting GitHub’s trusted reputation by creating fake repositories that masquerade as legitimate software projects, tricking developers and
