Ukrainian threat group UAC-0145 has launched a sophisticated social engineering campaign using fake CAPTCHA verification prompts, known as “ClickFix,” to trick users into executing malicious PowerShell commands. The campaign specifically targets Ukrainian users through compromised websites and phish
Threat actors have weaponized the legitimate update mechanism of ViPNet, a widely-deployed secure communication software used across Russian government agencies, to deliver malicious payloads. The attack demonstrates advanced knowledge of the software’s architecture and represents a significant supp
7-Zip version 26.02 has been released to address a critical remote code execution (RCE) vulnerability that could allow attackers to execute arbitrary code through specially crafted archive files. Users should immediately update to the latest version to protect against potential exploitation. The fla
Hugging Face, the leading AI model repository platform, confirmed a sophisticated breach where attackers deployed autonomous AI agents to exploit vulnerabilities in their machine learning pipeline. The incident marks a watershed moment in cybersecurity—attackers leveraged AI-driven automation to nav
Microsoft has issued an urgent warning about a significant surge in ACR Stealer attacks targeting enterprise customers. This information-stealing malware is actively harvesting credentials, browser data, cryptocurrency wallets, and sensitive corporate information from compromised systems. The campai
A sophisticated Chinese-linked rootkit named Daxin has been discovered operating continuously for 13 years on a Taiwan-based manufacturer’s network. This advanced kernel-level malware employs innovative communication techniques, including hijacking legitimate TCP/IP stack communications to evade det
Security researchers have disclosed a critical 0-click exploit chain targeting Google Pixel 10 devices that achieves root access through vulnerabilities in the Visual Processing Unit (VPU). The attack requires no user interaction, can be triggered remotely through malicious media files, and grants a
A critical remote code execution (RCE) vulnerability designated CVE-2026-63030, dubbed “wp2shell,” has been discovered in WordPress Core affecting versions 6.4 through 6.7.1. The flaw allows unauthenticated attackers to execute arbitrary PHP code on vulnerable servers through malicious HTTP requests
A critical heap buffer overflow vulnerability (CVE-2026-42533) has been discovered in NGINX’s map directive regex processing that could allow remote code execution. The flaw affects NGINX versions prior to 1.26.2 and 1.27.1, potentially impacting millions of web servers worldwide. Organizations usin
Citrix has disclosed CVE-2026-53565, a critical privilege escalation vulnerability affecting Citrix Secure Access and Endpoint Client for Windows. The flaw allows authenticated attackers with low-level privileges to escalate to SYSTEM-level access, potentially compromising entire enterprise networks