Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
Tag: Cyber Security News
APT36 Uses USB-Spreading Malware to Reach Air-Gapped Government Networks
APT36, a Pakistan-linked threat group, has launched a campaign that uses infected removable drives to carry malware into disconnected government…
One Compromised Kubernetes Node Can Expose Every Workload Identity Running on It
A Kubernetes node becomes an identity breach point when an attacker gains root access. Research shows a hostile process can impersonate other workloads…
Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces
Docker patched two serious vulnerabilities in Docker Sandboxes that could let a malicious guest workload break out of its intended shared workspace and…
North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews
North Korean operators are using artificial intelligence, remote-control software, and hired stand-ins to make fraudulent job candidates look genuine…
FamousSparrow Exploits Public-Facing Exchange Servers to Deploy SparroWocky Backdoor
FamousSparrow has introduced a new backdoor called SparroWocky after breaking into public-facing Microsoft Exchange servers. The campaign shows how a…
Hacked Thai College Website Abused to Redirect Google Searchers to Illegal Online Casino
A compromised Thai college website was quietly turned into a springboard for an illegal online casino, according to new findings from anti-fraud platform…
SilkParasite-Linked Malware Infrastructure Traced Back Four Years Across Central Asia
SilkParasite is a cyberespionage operation aimed at government, energy and telecommunications interests in Central Asia. New infrastructure analysis…
Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware
HEAVYGRAM is a Windows surveillance backdoor that turns Telegram into an operational command center for attackers. Rather than relying on a dedicated…
Windows 11 KB5124008 Update Breaks Active Directory Domain Trust and Blocks User Logins
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking Active Directory domain trust on some enterprise computers,…
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
GhostCode is a newly identified phishing kit that turns a normal Microsoft 365 sign-in into an account takeover. It does not need to steal a password.…
Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors
Microsoft has confirmed a fresh service degradation affecting its Microsoft 365 suite, with users worldwide reporting an inability to access core…
Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs
Hackers can now rent a Windows-focused remote access tool called VectraRAT for $250 a month, lowering the barrier to deep and persistent compromise. The…
CenterPoint Energy Data Breach – Hackers Stolen Customer’s Personal Data
CenterPoint Energy disclosed a data breach after an unauthorized third party obtained personal information from some of its customers through an…
Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access
WSO2 has disclosed a critical authentication bypass vulnerability that could allow remote attackers to take over accounts, including administrative…
CISA Warns of Critical ScreenConnect Vulnerability Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical ConnectWise ScreenConnect vulnerability, tracked as CVE-2026-84869,…
Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication
Check Point has released an urgent security fix for CVE-2026-91843, a critical stack-based buffer overflow that could let an unauthenticated remote…
German Manufacturer Shrinks Security Alert Response While Protecting 10,000 Endpoints
A five-person security team at an unnamed German manufacturer has cut a reported 15 minutes from each alert investigation after replacing an air-gapped…
Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families
Oracle has released one of its largest monthly security bundles to date, shipping 673 new security patches in its September 2026 Critical Security Patch…
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
A critical vulnerability in the Issabel Framework, which supports Issabel PBX deployments, is being actively exploited in the wild. The flaw, tracked as…