A threat actor known as “Trim” has developed a sophisticated attack platform that weaponizes jailbroken AI language models to automate offensive cybersecurity operations. This platform integrates multiple compromised LLMs to generate malicious code, craft social engineering content, and orchestrate
International law enforcement has successfully dismantled Kratos, a sophisticated phishing-as-a-service (PhaaS) platform that enabled cybercriminals worldwide to conduct credential theft operations with minimal technical expertise. The platform’s developer has been arrested, and the infrastructure s
Qilin ransomware affiliates are actively exploiting CVE-2026-0257, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. The flaw allows attackers to gain unauthorized VPN access without credentials, establishing initial network footholds for ransomware dep
Microsoft SharePoint Server is under siege from active exploitation of CVE-2026-50522, a critical remote code execution vulnerability with a CVSS score of 9.8. Following the public release of proof-of-concept code, threat actors are weaponizing this flaw to compromise unpatched SharePoint instances.
The wp2shell exploit framework is actively targeting WordPress installations through malicious file upload vulnerabilities, enabling attackers to establish persistent web shells on compromised servers. Visitors to infected sites face risks including malware distribution, credential theft, and browse
Multiple AsyncAPI npm packages were compromised when attackers exploited GitHub Actions workflows to inject Miasma RAT malware. The supply chain attack affected several widely-used packages, exposing thousands of downstream users to remote access trojans. The threat actors leveraged compromised GitH
A critical zero-day vulnerability in Windows’ LegacyHive component is being actively exploited in the wild, allowing attackers to escalate privileges and gain SYSTEM-level access. With no official Microsoft patch available, security researcher collective 0patch has released free, unofficial micropat
The Qilin ransomware group is actively exploiting CVE-2024-21893, a critical authentication bypass vulnerability in Palo Alto Networks’ GlobalProtect VPN gateway. This flaw allows attackers with network access to execute arbitrary code with root privileges on vulnerable firewalls. Organizations runn
Threat actors are leveraging Telegram bots as command-and-control (C2) infrastructure to maintain persistent backdoor access to government networks across the Middle East. This sophisticated campaign uses encrypted messaging channels to remotely execute commands, exfiltrate sensitive data, and evade
Threat actors are actively exploiting a critical vulnerability in Palo Alto Networks’ PAN-OS to deploy Qilin ransomware across enterprise networks. The vulnerability enables unauthenticated remote code execution on internet-facing management interfaces, allowing attackers to establish persistent acc