July 27, 2026

Vulnerability

CVE-2026-16812 VeloCloud command injection exploited in the wild affecting VeloCloud Orchestrator

CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild

Do Son July 27, 2026 0
Plane authorization bypass CVE-2026-15342 exposing multi-tenant workspace assets

Unpatched Plane Authorization Bypass CVE-2026-15342 Exposes Other Workspaces

Do Son July 27, 2026 0
Apache Fory vulnerabilities in Java, C++, and Rust deserialization fixed in version 1.4.0

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust

Do Son July 27, 2026 0
CVE-2026-61511 vBulletin preauth RCE proof-of-concept abusing the runMaths eval for remote code execution

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

Do Son July 27, 2026 0

Cyber Security

VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub Operation STANDOFF infrastructure map showing a Russian-speaking threat group hiding C2 servers behind GitHub redirects

VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub

July 27, 2026 0
Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants

July 27, 2026 0
TELESHIM Malware Targets Middle East Governments Through Telegram SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak

TELESHIM Malware Targets Middle East Governments Through Telegram

July 27, 2026 0
APT42 TAMECAT Malware Grows with AI-Assisted Phishing Tamecat

APT42 TAMECAT Malware Grows with AI-Assisted Phishing

July 27, 2026 0

Malware Alert

RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads RenPy Loader infection chain in fake game installers using MSBuild and EtherHiding to deploy Amatera Stealer

RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads

July 27, 2026 0
Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors

July 27, 2026 0
NadMesh Botnet Targets AI Services and Cloud Environments NadMesh botnet targeting cloud systems and presenting an AI infrastructure threat.

NadMesh Botnet Targets AI Services and Cloud Environments

July 24, 2026 0
TAG-150 Attack Chain Deploys DenoRAT Malware hack

TAG-150 Attack Chain Deploys DenoRAT Malware

July 24, 2026 0

Data Leak

Claude AI Shared Chats Surfaced in Google Over a Config Error Claude AI shared conversation links indexed in Google search due to a robots.txt and X-Robots-Tag misconfiguration exposing private chat content

Claude AI Shared Chats Surfaced in Google Over a Config Error

July 27, 2026 0
Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent Hugging Face breach driven by an autonomous AI agent attack exposing internal datasets and credentials

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent

July 18, 2026 0
Grok Build Repository Upload Scandal: Researcher Confirms Privacy Mode Cannot Stop It Grok Build repository upload controversy, SpaceXAI privacy mode response

Grok Build Repository Upload Scandal: Researcher Confirms Privacy Mode Cannot Stop It

July 14, 2026 0
The Grok Build Privacy Controversy: Unauthorized Repository Uploads Grok Build privacy settings interface showing how to disable automated repository data uploads

The Grok Build Privacy Controversy: Unauthorized Repository Uploads

July 14, 2026 0
Next Page ❯