The Swiss Federal Office of Information Technology (FOITT) confirmed a security breach affecting approximately 200 employee accounts through exploitation of SharePoint vulnerabilities. Attackers leveraged configuration weaknesses and authentication flaws to gain unauthorized access to internal syste
The Greatness Phishing-as-a-Service (PhaaS) platform has evolved with a dangerous new capability: device code phishing attacks that bypass multi-factor authentication (MFA). This technique exploits OAuth 2.0’s device authorization flow to trick victims into authenticating malicious applications, gra
Security researchers have discovered that malware can steal Google-synced passkeys from infected systems without requiring user passwords, biometric authentication, or any interaction. The attack exploits the way Google Chrome syncs passkey data, allowing attackers to extract and reuse credentials o
A critical seed generation flaw in COLDCARD hardware wallets has been linked to the theft of nearly $89 million in Bitcoin. The vulnerability stems from insufficient entropy during the seed phrase generation process, allowing attackers to reconstruct private keys and drain user funds. Multiple victi
A Russian state-sponsored threat actor has developed a sophisticated attack methodology exploiting public Wi-Fi captive portals to deliver malware to unsuspecting users. The campaign targets hotels, airports, and coffee shops across Europe and North America, transforming legitimate login pages into
A threat actor group known as ExfilSquad has successfully breached a UK police database, exposing personal information of over 100,000 police officers and staff members. The leaked data includes names, ranks, email addresses, phone numbers, and potentially home addresses of law enforcement personnel
Critical vulnerabilities in Hugging Face’s Diffusers library allow attackers to execute arbitrary code by bypassing safety mechanisms designed to protect against malicious AI model files. The flaws enable remote code execution (RCE) when users load compromised models from repositories, turning trust
A critical remote code execution (RCE) vulnerability tracked as CVE-2026-12935 has been discovered in TP-Link TL-WR940N routers. This flaw allows unauthenticated attackers to execute arbitrary commands on affected devices, potentially leading to full device compromise. With millions of these budget
N-able’s N-central remote monitoring and management (RMM) platform suffered a critical security vulnerability that attackers exploited even after the vendor’s initial patch proved insufficient. Threat actors leveraged the flaw to establish persistent tunnels into managed service provider (MSP) netwo
Water treatment facilities in Georgia and Michigan have been compromised in cyberattacks linked to escalating US-Iran tensions. Attackers targeted industrial control systems (ICS), potentially gaining access to operational technology that manages water treatment processes. These incidents follow a p