Varonis Threat Labs

Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims hack

hack

Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims

Do Son July 23, 2026

At a Glance Actor or group A vendor using the alias “Kontraktnik”; no real identity published Activity...

Unmasking 1Campaign: The Professionalized ‘Cloaking’ Service Powering Global Malvertising Scams 1Campaign Cloaking Platform Google Ads Malvertising

1Campaign Cloaking Platform Google Ads Malvertising

Unmasking 1Campaign: The Professionalized ‘Cloaking’ Service Powering Global Malvertising Scams

Do Son February 27, 2026

Varonis Threat Labs recently highlights a comprehensive toolkit designed to weaponize search engine advertising. Researchers uncovered 1Campaign,...

“Exfil Out&Look” Flaw Lets Spies Steal Emails via OWA Undetected Exfil Out&Look Microsoft 365 Logging Gap Outlook Classic KB5074109 freeze, January 2026 POP3 PST bug Outlook Classic POP3 freeze, KB5074109 Windows 11 bug Outlook, CPU Usage Outlook lag Outlook Lite discontinued

Exfil Out&Look Microsoft 365 Logging Gap Outlook Classic KB5074109 freeze, January 2026 POP3 PST bug Outlook Classic POP3 freeze, KB5074109 Windows 11 bug Outlook, CPU Usage Outlook lag Outlook Lite discontinued

“Exfil Out&Look” Flaw Lets Spies Steal Emails via OWA Undetected

Do Son February 2, 2026

A gaping blind spot in Microsoft 365’s logging capabilities allows attackers to steal sensitive emails without leaving...

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed Microsoft Strategic Market Status investigation Dell CES 2026 AI PC marketing, Microsoft Copilot+ PC consumer apathy Microsoft AI Sales Quota Enterprise AI Demand Edge Copilot, AI browsing

Microsoft Strategic Market Status investigation Dell CES 2026 AI PC marketing, Microsoft Copilot+ PC consumer apathy Microsoft AI Sales Quota Enterprise AI Demand Edge Copilot, AI browsing

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed

Do Son January 16, 2026

A new research report from Varonis Threat Labs has unveiled a vulnerability in Microsoft Copilot Personal that...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-0768CVSS 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-35029
### Impact The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-9586CVSS 9.3
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-82329CVSS 9.8
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026