Cybersecurity News, Threats & Vulnerability Alerts

EvilTokens Kit Targets Microsoft Accounts with Device Code Phishing

New EvilTokens malicious toolkit exploits device code phishing to hijack Microsoft accounts for business email compromise attacks.

NoVoice Android Malware Infiltrates 50+ Google Play Apps

NoVoice malware infected over 50 Android apps on Google Play Store, accumulating 2.3 million downloads before detection and removal.

FBI Warns Against Chinese Mobile Apps Over Data Security Risks

The FBI issued a security advisory warning Americans to avoid Chinese-developed mobile applications due to data collection and national security concerns.

Google Patches Fourth Chrome Zero-Day Exploited in 2026

Google released an emergency Chrome update fixing CVE-2026-5281, the fourth actively exploited zero-day vulnerability discovered this year.

Cisco Breached via Trivy Supply Chain Attack Credentials

Cisco confirms cyberattack where threat actors used stolen Trivy credentials to breach development systems and steal source code.

Axios npm Package Hijacked, 100M+ Downloads Compromised

Attackers compromised the popular Axios JavaScript HTTP client npm package, delivering cross-platform remote access trojans to millions of developers worldwide.

Maryland Man Charged in $53M Uranium Finance Crypto Hack

Federal prosecutors charged a Maryland resident with stealing over $53 million through two separate attacks on Uranium Finance cryptocurrency exchange.

Dutch Finance Ministry Hit by Cyberattack, Systems Offline

The Dutch Ministry of Finance took critical systems offline after detecting a cyberattack two weeks ago, disrupting treasury banking operations.

CISA Orders Federal Agencies to Patch Exploited Citrix Flaw

CISA mandates federal agencies patch actively exploited Citrix NetScaler vulnerability by Thursday amid ongoing attacks.

RoadK1ll Implant Enables Silent Network Lateral Movement

Security researchers discovered RoadK1ll, a sophisticated malicious implant designed for covert lateral movement across compromised enterprise networks.

ChatGPT Vulnerability Exposed User Data Through Malicious Prompts

Check Point researchers discovered a ChatGPT vulnerability allowing attackers to steal conversation data and uploaded files through crafted prompts.

DeepLoad Malware Uses ClickFix Tactics for Credential Theft

Cybercriminals deploy DeepLoad malware loader through ClickFix social engineering campaigns, targeting user credentials with AI-assisted evasion techniques.

ShinyHunters Breaches European Commission, Steals 350GB

ShinyHunters hacker group claims massive data theft from European Commission cloud systems affecting government operations.

F5 BIG-IP APM Flaw Upgraded to Critical RCE Threat

F5 reclassified a BIG-IP APM denial-of-service vulnerability as critical remote code execution after attackers deployed webshells on unpatched systems.

Fortinet FortiClient EMS Hit by Active Zero-Day Attacks

Attackers are actively exploiting CVE-2026-21643, a critical remote code execution vulnerability in Fortinet's FortiClient EMS platform.

Iran-Linked Handala Hackers Breach FBI Director's Email

Iranian hackers compromised FBI Director Kash Patel's personal email account and leaked sensitive documents online.

Smart Slider 3 Plugin Flaw Exposes 800K WordPress Sites

Critical vulnerability in Smart Slider 3 WordPress plugin allows subscriber-level users to access arbitrary server files across 800,000 websites.

Iranian Hackers Breach FBI Director Kash Patel's Email

Iranian-linked Handala Hack Team successfully compromised FBI Director Kash Patel's personal email account, leaking sensitive documents online.

Infinity Stealer Targets macOS with Python-Based Payload

New Infinity Stealer malware uses Python and Nuitka compiler to steal credentials from macOS systems through sophisticated social engineering campaigns.

Infiniti Stealer Targets Mac Users via Fake Cloudflare CAPTCHA

Attackers deploy Infiniti infostealer on macOS through fake Cloudflare CAPTCHA pages using sophisticated ClickFix social engineering techniques.

CVE-2026-3055: Citrix NetScaler Critical Flaw Under Attack

Critical CVE-2026-3055 vulnerability in Citrix NetScaler ADC and Gateway faces active reconnaissance as attackers probe memory overread flaw.