Microsoft Outlook Zero-Day Exploitation Prompts Urgent Patching
Attackers are exploiting an Outlook flaw to steal authentication hashes, prompting Microsoft to release urgent fixes in its November update.
Vulnerabilities ·
Malware & Ransomware
View allMalware & Ransomware
.NET Cereal Malware Bypasses C2 Infrastructure to Spy on Kazakhstan, Romania Emails
Russia-linked group uses .NET toolset to intercept government emails in Kazakhstan and Romania without external command infrastructure.
Malware & Ransomware
Crypto-stealing malware: risks for remote and hybrid workers
Remote work removes physical security layers, allowing crypto-stealers to bypass corporate defences by targeting the unmonitored home environment where financial apps reside.
Malware & Ransomware
Train Staff to Spot Banking Trojans: A Practical Plan
Banking trojans hide in plain sight by manipulating what you see on screen, making visual verification the only reliable defence against financial fraud.
Malware & Ransomware
How to Evaluate Mobile Security Apps for Enterprise Protection
Most mobile security tools fail not because they lack features, but because they cannot distinguish between legitimate administrative actions and stealthy malware behaviour on rooted devices.
Vulnerabilities
View allSipay WooCommerce Virtual POS Module Vulnerability Allows Authentication Bypass
A critical flaw in the Sipay WooCommerce Virtual POS Module enables attackers to bypass authentication and manipulate API messages via man-in-the-middle attacks.
Checkmk path traversal flaw lets remote sites write files to central servers
A critical vulnerability in Checkmk monitoring software allows attackers controlling remote sites to execute code on central servers by writing arbitrary files.
MongoDB macOS TLS flaw bypasses IPv6 certificate validation
A critical vulnerability in MongoDB's macOS client allows attackers to intercept encrypted traffic by bypassing certificate trust checks for IPv6 connections.
Rogue AI Watch
View allCyber Attacks
View all- 1
- 2
- 3
- 4
Latest news
Cyber Attacks
Cisco BroadWorks XXE flaw CVE-2026-20320 actively exploited in wild
CISA added a high-severity Cisco BroadWorks vulnerability to its exploited list, urging immediate patching of cloud communications platforms.
Vulnerabilities
AsiaInfo BSS JWT Signature Bypass Allows Unauthenticated Privileged Access
A critical flaw in AsiaInfo Business Support System lets attackers forge tokens to execute privileged actions without valid credentials.
Vulnerabilities
Microsoft SQL Server Heap Buffer Overflow Allows Remote Code Execution
An authorised attacker can execute code on vulnerable SQL Server instances via a remote network connection, according to the published report
Vulnerabilities
Firefox 160 patches critical sandbox escape in Service Workers
Mozilla fixed a severe use-after-free flaw allowing attackers to break out of browser sandboxes in Firefox versions prior to 160.
Cyber Attacks
Chrome XML use-after-free zero-day CVE-2026-125350 patched after wild exploitation
Google has released a fix for an eighth actively exploited Chrome zero-day of 2026, a high-severity memory flaw in the XML component.
Vulnerabilities
OpenSSH musl libc Auth Bypass: Oversized Passwords Unlock Disabled Accounts
Attackers exploit an interaction between OpenSSH and musl libc to bypass authentication on disabled accounts using oversized password inputs.
Cyber Attacks
Digidentity survey reveals UK bank customers fear deepfake fraud detection gaps
Research shows 69% of Brits doubt their banks can spot AI impersonation, highlighting a tension between security needs and convenience expectations.
Cyber Attacks
Web3Auth Breach Exposes Keplr Private Keys for Social Login Users
A flaw in Web3Auth infrastructure allowed attackers to steal crypto from Keplr wallets using Google or Apple sign-in, prompting emergency fund transfers.