Ongoing Cyberattack Exploits Sangoma FreePBX CVE-2025-64328: Over 900 Instances Compromised by Web Shells
CVE Analysis Center

Ongoing Cyberattack Exploits Sangoma FreePBX CVE-2025-64328: Over 900 Instances Compromised by Web Shells

Mar 1, 2026 Read →
ManoMano Zendesk Data Breach Exposes 38 Million Customers Across Europe: Incident Analysis and Security Implications
CVE Analysis Center

ManoMano Zendesk Data Breach Exposes 38 Million Customers Across Europe: Incident Analysis and Security Implications

Mar 1, 2026 Read →
Malicious Go Module github.com/xinfeisoft/crypto Targets Ubuntu and CI/CD Environments With Rekoobe Backdoor and Credential Theft
CVE Analysis Center

Malicious Go Module github.com/xinfeisoft/crypto Targets Ubuntu and CI/CD Environments With Rekoobe Backdoor and Credential Theft

Mar 1, 2026 Read →
Critical CVE-2026-21902 Vulnerability in Juniper Networks PTX Series Routers Running Junos OS Evolved: Full Device Takeover Risk and Mitigation Steps
CVE Analysis Center

Critical CVE-2026-21902 Vulnerability in Juniper Networks PTX Series Routers Running Junos OS Evolved: Full Device Takeover Risk and Mitigation Steps

Mar 1, 2026 Read →
APT37’s Ruby Jumper Malware Targets Air-Gapped Windows Networks with USB-Based Attacks
CVE Analysis Center

APT37’s Ruby Jumper Malware Targets Air-Gapped Windows Networks with USB-Based Attacks

Mar 1, 2026 Read →
UAT-9921 Targets Technology and Financial Sectors with VoidLink Malware via Apache Dubbo Vulnerabilities
CVE Analysis Center

UAT-9921 Targets Technology and Financial Sectors with VoidLink Malware via Apache Dubbo Vulnerabilities

Feb 15, 2026 Read →
Trezor and Ledger Users Targeted by Sophisticated Snail Mail Phishing Attacks: Cryptocurrency Wallet Security Alert
CVE Analysis Center

Trezor and Ledger Users Targeted by Sophisticated Snail Mail Phishing Attacks: Cryptocurrency Wallet Security Alert

Feb 15, 2026 Read →
Technical Analysis of CANFAIL Malware Targeting Ukrainian Defense and Energy Sectors by Suspected Russian Threat Actor
CVE Analysis Center

Technical Analysis of CANFAIL Malware Targeting Ukrainian Defense and Energy Sectors by Suspected Russian Threat Actor

Feb 15, 2026 Read →
Louis Vuitton, Dior, and Tiffany Fined $25 Million for SaaS Customer Management Data Breaches in South Korea
CVE Analysis Center

Louis Vuitton, Dior, and Tiffany Fined $25 Million for SaaS Customer Management Data Breaches in South Korea

Feb 15, 2026 Read →
Lazarus Group Targets npm, PyPI, and GitHub Developers With Fake Job Recruiter Malware Campaign
CVE Analysis Center

Lazarus Group Targets npm, PyPI, and GitHub Developers With Fake Job Recruiter Malware Campaign

Feb 15, 2026 Read →
Google Chrome 145 Security Update: Patch Addresses 11 Critical Vulnerabilities, Including High-Severity Remote Code Execution Risks
CVE Analysis Center

Google Chrome 145 Security Update: Patch Addresses 11 Critical Vulnerabilities, Including High-Severity Remote Code Execution Risks

Feb 15, 2026 Read →
Coordinated State-Sponsored Cyber Attacks Target Battlefield Management and Defense Supply Chains: Google Links China, Iran, Russia, North Korea
CVE Analysis Center

Coordinated State-Sponsored Cyber Attacks Target Battlefield Management and Defense Supply Chains: Google Links China, Iran, Russia, North Korea

Feb 15, 2026 Read →
Claude LLM Artifacts Exploited to Distribute Mac Infostealer Malware via ClickFix Attack Chain Targeting macOS Users
CVE Analysis Center

Claude LLM Artifacts Exploited to Distribute Mac Infostealer Malware via ClickFix Attack Chain Targeting macOS Users

Feb 15, 2026 Read →
Google Gemini AI Under Attack: APTs and Cybercriminals Exploit Platform Across the Entire Cyber Kill Chain
CVE Analysis Center

Google Gemini AI Under Attack: APTs and Cybercriminals Exploit Platform Across the Entire Cyber Kill Chain

Feb 12, 2026 Read →
February 2026 Security Patch Report: Microsoft, SAP, Intel, Adobe, and 60+ Vendors Address Critical Vulnerabilities in OS, Cloud, and Network Platforms
CVE Analysis Center

February 2026 Security Patch Report: Microsoft, SAP, Intel, Adobe, and 60+ Vendors Address Critical Vulnerabilities in OS, Cloud, and Network Platforms

Feb 12, 2026 Read →
SolarWinds Web Help Desk Critical Vulnerabilities: Unauthenticated RCE and Authentication Bypass Fixed in Emergency Patch
CVE Analysis Center

SolarWinds Web Help Desk Critical Vulnerabilities: Unauthenticated RCE and Authentication Bypass Fixed in Emergency Patch

Feb 1, 2026 Read →
Under Armour Customer Data Breach 2025: Technical Analysis of Everest Ransomware Attack and Exposed Email Addresses
CVE Analysis Center

Under Armour Customer Data Breach 2025: Technical Analysis of Everest Ransomware Attack and Exposed Email Addresses

Jan 25, 2026 Read →
StackWarp (CVE-2025-29943): Critical SEV-SNP Vulnerability in AMD Zen 1–5 CPUs Exposes Confidential Computing to Privilege Escalation and Key Theft
CVE Analysis Center

StackWarp (CVE-2025-29943): Critical SEV-SNP Vulnerability in AMD Zen 1–5 CPUs Exposes Confidential Computing to Privilege Escalation and Key Theft

Jan 25, 2026 Read →
Sophisticated Multi-Stage Phishing Attack Exploits Microsoft Windows in Russian Organizations Using Amnesia RAT and Hakuna Matata Ransomware
CVE Analysis Center

Sophisticated Multi-Stage Phishing Attack Exploits Microsoft Windows in Russian Organizations Using Amnesia RAT and Hakuna Matata Ransomware

Jan 25, 2026 Read →
Sandworm’s DynoWiper Attack Targeting Polish Combined Heat and Power and Renewable Energy Management Systems: Incident Analysis and Lessons Learned
CVE Analysis Center

Sandworm’s DynoWiper Attack Targeting Polish Combined Heat and Power and Renewable Energy Management Systems: Incident Analysis and Lessons Learned

Jan 25, 2026 Read →
Okta SSO Accounts Targeted by Sophisticated Vishing and Adversary-in-the-Middle (AiTM) Phishing Attacks Leading to Data Theft and Extortion
CVE Analysis Center

Okta SSO Accounts Targeted by Sophisticated Vishing and Adversary-in-the-Middle (AiTM) Phishing Attacks Leading to Data Theft and Extortion

Jan 25, 2026 Read →
Konni APT Targets Blockchain Development Environments with AI-Generated PowerShell Malware via Discord Exploits
CVE Analysis Center

Konni APT Targets Blockchain Development Environments with AI-Generated PowerShell Malware via Discord Exploits

Jan 25, 2026 Read →
CVE-2025-59718/59719: Fortinet FortiCloud SSO Authentication Bypass Actively Exploited on Fully Patched FortiGate Firewalls
CVE Analysis Center

CVE-2025-59718/59719: Fortinet FortiCloud SSO Authentication Bypass Actively Exploited on Fully Patched FortiGate Firewalls

Jan 25, 2026 Read →
Critical GNU InetUtils telnetd Vulnerability (CVE-2026-24061) Allows Remote Root Access via Authentication Bypass
CVE Analysis Center

Critical GNU InetUtils telnetd Vulnerability (CVE-2026-24061) Allows Remote Root Access via Authentication Bypass

Jan 25, 2026 Read →