CPUID Website Compromised: Malware Delivered via CPU-Z and HWMonitor Download Links in April 2026
Cybersecurity Incident Analysis

CPUID Website Compromised: Malware Delivered via CPU-Z and HWMonitor Download Links in April 2026

Apr 1, 2026 Read →
For retailers: Suppliers of POS, OMS and CRM systems are not ‘Third Party’, they are actually ‘Teammates’

For retailers: Suppliers of POS, OMS and CRM systems are not ‘Third Party’, they are actually ‘Teammates’

Mar 26, 2026 Read →
Warlock Ransomware Exploits Unpatched Microsoft SharePoint and SmarterMail Servers: Tactics, Analysis, and Mitigation Guidance
Active Exploitation Alert

Warlock Ransomware Exploits Unpatched Microsoft SharePoint and SmarterMail Servers: Tactics, Analysis, and Mitigation Guidance

Mar 18, 2026 Read →
Outpost24 C-Suite Spearphishing Incident: Analysis of 7-Stage Social Engineering Attack in March 2026
CVE Analysis Center

Outpost24 C-Suite Spearphishing Incident: Analysis of 7-Stage Social Engineering Attack in March 2026

Mar 18, 2026 Read →
LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows Environments with Deno In-Memory Loader
Active Exploitation Alert

LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows Environments with Deno In-Memory Loader

Mar 18, 2026 Read →
Konni Targets KakaoTalk Desktop with EndRAT: Multi-Stage Phishing Attack Exploits Social Messaging for Malware Propagation
Active Exploitation Alert

Konni Targets KakaoTalk Desktop with EndRAT: Multi-Stage Phishing Attack Exploits Social Messaging for Malware Propagation

Mar 18, 2026 Read →
Intuitive Surgical Administrative Network Breach: 2026 Phishing Attack Exposes Employee and Customer Data
Active Exploitation Alert

Intuitive Surgical Administrative Network Breach: 2026 Phishing Attack Exposes Employee and Customer Data

Mar 18, 2026 Read →
GlassWorm ForceMemo Campaign: Supply Chain Attack Targets GitHub Python Repositories with Stolen Tokens and Blockchain-Based Malware
Active Exploitation Alert

GlassWorm ForceMemo Campaign: Supply Chain Attack Targets GitHub Python Repositories with Stolen Tokens and Blockchain-Based Malware

Mar 18, 2026 Read →
EU Sanctions on Chinese and Iranian Firms: Raptor Train Botnet, SMS Service, and Olympic Billboard Cyberattacks Targeting European Critical Infrastructure
Active Exploitation Alert

EU Sanctions on Chinese and Iranian Firms: Raptor Train Botnet, SMS Service, and Olympic Billboard Cyberattacks Targeting European Critical Infrastructure

Mar 18, 2026 Read →
CVE-2026-32746: Critical Unpatched Vulnerability in GNU InetUtils telnetd Enables Unauthenticated Remote Root Code Execution via Port 23
Active Exploitation Alert

CVE-2026-32746: Critical Unpatched Vulnerability in GNU InetUtils telnetd Enables Unauthenticated Remote Root Code Execution via Port 23

Mar 18, 2026 Read →
Critical AI Vulnerabilities in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and Remote Code Execution
Active Exploitation Alert

Critical AI Vulnerabilities in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and Remote Code Execution

Mar 18, 2026 Read →
Apple Urgent Security Update: CVE-2025-14174 WebKit Same-Origin Policy Bypass Vulnerability Impacts iOS, macOS, Chrome, and Edge
Active Exploitation Alert

Apple Urgent Security Update: CVE-2025-14174 WebKit Same-Origin Policy Bypass Vulnerability Impacts iOS, macOS, Chrome, and Edge

Mar 18, 2026 Read →
VENON Rust Malware Targets Itaú and 32 Other Brazilian Banks with Advanced Credential-Stealing Attacks
Active Exploitation Alert

VENON Rust Malware Targets Itaú and 32 Other Brazilian Banks with Advanced Credential-Stealing Attacks

Mar 15, 2026 Read →
Veeam Backup & Replication Vulnerabilities: Critical RCE Flaws Patched in Latest Security Update
Active Exploitation Alert

Veeam Backup & Replication Vulnerabilities: Critical RCE Flaws Patched in Latest Security Update

Mar 15, 2026 Read →
Starbucks Partner Central Data Breach Exposes Sensitive Employee Information in Credential Phishing Attack
Active Exploitation Alert

Starbucks Partner Central Data Breach Exposes Sensitive Employee Information in Credential Phishing Attack

Mar 15, 2026 Read →
Loblaw Companies Limited Data Breach 2026: Customer PII Exposed in Targeted Attack
CVE Analysis Center

Loblaw Companies Limited Data Breach 2026: Customer PII Exposed in Targeted Attack

Mar 15, 2026 Read →
Iranian CyberAv3ngers Target Unitronics Vision PLCs in US Critical Infrastructure Amid Rising Geopolitical Tensions
Active Exploitation Alert

Iranian CyberAv3ngers Target Unitronics Vision PLCs in US Critical Infrastructure Amid Rising Geopolitical Tensions

Mar 15, 2026 Read →
GlassWorm Supply-Chain Attack Exploits Open VSX Extensions to Target Developer Environments
Active Exploitation Alert

GlassWorm Supply-Chain Attack Exploits Open VSX Extensions to Target Developer Environments

Mar 15, 2026 Read →
Cyberattack on Poland’s National Centre for Nuclear Research (NCBJ): Attempted Breach of MARIA Reactor IT Systems Thwarted
Active Exploitation Alert

Cyberattack on Poland’s National Centre for Nuclear Research (NCBJ): Attempted Breach of MARIA Reactor IT Systems Thwarted

Mar 15, 2026 Read →
CVE-2026-23813: Critical Authentication Bypass in HPE Aruba AOS-CX Allows Remote Admin Password Reset
Active Exploitation Alert

CVE-2026-23813: Critical Authentication Bypass in HPE Aruba AOS-CX Allows Remote Admin Password Reset

Mar 15, 2026 Read →
Chinese Cyber Espionage Targets Southeast Asian Military C4I Systems Using AppleChris and MemFun Malware
Active Exploitation Alert

Chinese Cyber Espionage Targets Southeast Asian Military C4I Systems Using AppleChris and MemFun Malware

Mar 15, 2026 Read →
AppsFlyer Web SDK Supply Chain Attack: Global Crypto-Stealing JavaScript Injection and Mitigation Analysis
Active Exploitation Alert

AppsFlyer Web SDK Supply Chain Attack: Global Crypto-Stealing JavaScript Injection and Mitigation Analysis

Mar 15, 2026 Read →
FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025-59718/59719 for Credential Theft and Network Breach
CVE Analysis Center

FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025-59718/59719 for Credential Theft and Network Breach

Mar 11, 2026 Read →
Critical SAP FS-QUO and NetWeaver Vulnerabilities Exposed in March 2026 Security Patch Day: Immediate Action Required
CVE Analysis Center

Critical SAP FS-QUO and NetWeaver Vulnerabilities Exposed in March 2026 Security Patch Day: Immediate Action Required

Mar 11, 2026 Read →