Cybersecurity firm Volexity has disclosed an active zero-day exploitation campaign targeting SonicWall’s Secure Mobile Access (SMA) 1000 series VPN appliances. Threat actors are leveraging previously unknown vulnerabilities to achieve root-level access on these devices, allowing them to establish pe
North Korean state-sponsored threat actors have deployed a sophisticated steganographic technique to deliver OTTERCOOKIE malware by concealing malicious payloads within SVG (Scalable Vector Graphics) image files. This campaign specifically targets software developers, leveraging seemingly benign ima
A critical 15-year-old vulnerability in NGINX web server (CVE-2026-42533) enables remote code execution through worker process manipulation. The flaw affects multiple NGINX versions dating back to 2011 and allows attackers to crash worker processes and achieve RCE on vulnerable systems. Immediate pa
Ukrainian threat group UAC-0145 has launched a sophisticated social engineering campaign using fake CAPTCHA verification prompts, known as “ClickFix,” to trick users into executing malicious PowerShell commands. The campaign specifically targets Ukrainian users through compromised websites and phish
Threat actors have weaponized the legitimate update mechanism of ViPNet, a widely-deployed secure communication software used across Russian government agencies, to deliver malicious payloads. The attack demonstrates advanced knowledge of the software’s architecture and represents a significant supp
7-Zip version 26.02 has been released to address a critical remote code execution (RCE) vulnerability that could allow attackers to execute arbitrary code through specially crafted archive files. Users should immediately update to the latest version to protect against potential exploitation. The fla
Hugging Face, the leading AI model repository platform, confirmed a sophisticated breach where attackers deployed autonomous AI agents to exploit vulnerabilities in their machine learning pipeline. The incident marks a watershed moment in cybersecurity—attackers leveraged AI-driven automation to nav
Microsoft has issued an urgent warning about a significant surge in ACR Stealer attacks targeting enterprise customers. This information-stealing malware is actively harvesting credentials, browser data, cryptocurrency wallets, and sensitive corporate information from compromised systems. The campai
A sophisticated Chinese-linked rootkit named Daxin has been discovered operating continuously for 13 years on a Taiwan-based manufacturer’s network. This advanced kernel-level malware employs innovative communication techniques, including hijacking legitimate TCP/IP stack communications to evade det
Security researchers have disclosed a critical 0-click exploit chain targeting Google Pixel 10 devices that achieves root access through vulnerabilities in the Visual Processing Unit (VPU). The attack requires no user interaction, can be triggered remotely through malicious media files, and grants a