Security researchers have discovered an exposed malware command-and-control (C2) server hosting a sophisticated AI-assisted phishing toolkit targeting Mexican organizations. The server, left unsecured, revealed a WebDAV-based malware campaign utilizing artificial intelligence to craft convincing Spa
BugHunter, a new open-source bug bounty toolkit leveraging Claude AI and free AI providers, has been released to the security community. The tool automates vulnerability discovery, reconnaissance, and exploit generation workflows by integrating large language models into traditional security testing
A critical vulnerability in FIFA’s streaming infrastructure could have allowed attackers to remotely hijack World Cup broadcast streams, potentially exposing millions of viewers to malicious content. The flaw, discovered in the content delivery system, enabled unauthorized access to streaming server
The threat actor UNC3753 is conducting a sophisticated campaign targeting U.S. law firms through vishing (voice phishing) attacks combined with legitimate remote monitoring and management (RMM) tools. Attackers impersonate IT support personnel to trick employees into installing remote access softwar
A critical 15-year-old vulnerability in NGINX web server (CVE-2026-42533) enables remote code execution through worker process manipulation. The flaw affects multiple NGINX versions dating back to 2011 and allows attackers to crash worker processes and achieve RCE on vulnerable systems. Immediate pa
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Splunk Enterprise vulnerability (CVE-2024-36991) to its Known Exploited Vulnerabilities (KEV) catalog after detecting active exploitation in the wild. Federal agencies must patch their systems by Sunday under binding op
Tchap, the French government’s proprietary encrypted messaging application, suffered a significant security breach that exposed sensitive government communications. The platform, designed specifically for state officials and public servants, was compromised through authentication vulnerabilities tha
A critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks’ PAN-OS GlobalProtect gateway is being actively exploited in the wild. The flaw allows unauthenticated attackers to bypass authentication mechanisms and gain unauthorized access to protected networks. Organizations
Microsoft has officially confirmed a critical zero-day local privilege escalation (LPE) vulnerability in the Microsoft Malware Protection Engine, designated as CVE-2026-50656. Codenamed “RoguePlanet,” the flaw allows a local attacker to execute a timing-based race condition exploit. If successful, this exploit bypasses active security controls to escalate user privileges to NT AUTHORITY\SYSTEM. The underlying Proof-of-Concept (PoC)…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the LiteSpeed Cache plugin for WordPress to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2024-28000, this privilege escalation flaw affects millions of WordPress sites and is b