Cybersecurity News, Threats & Vulnerability Alerts

CISA Adds Critical F5 BIG-IP CVE-2025-53521 to KEV Catalog

CISA added CVE-2025-53521 affecting F5 BIG-IP Access Policy Manager to its Known Exploited Vulnerabilities catalog following confirmed active exploitation.

Russian APT TA446 Targets iOS with DarkSword Exploit Kit

Russian state-sponsored group TA446 deploys DarkSword exploit kit in targeted email campaigns against iOS devices.

TeamPCP Hackers Compromise Telnyx PyPI Package

TeamPCP threat group compromised the official Telnyx Python package on PyPI, injecting credential-stealing malware hidden in WAV audio files.

Open VSX Registry Bug Let Malicious VS Code Extensions Bypass Security

Open VSX's pre-publish scanning pipeline contained a critical flaw that allowed malicious Visual Studio Code extensions to bypass security vetting and reach the registry.

European Commission Confirms AWS Cloud Breach Investigation

The European Commission is investigating a security breach after attackers gained unauthorized access to its Amazon Web Services cloud infrastructure.

TP-Link Patches Critical Router Flaws Enabling RCE

TP-Link released security updates fixing high-severity vulnerabilities that allow authentication bypass and remote code execution on popular router models.

Dutch Police Confirm Phishing Attack Breach

The Dutch National Police disclosed a security breach from a successful phishing attack with limited impact on operations.

Ajax Amsterdam Confirms Data Breach Affecting Hundreds

Dutch football club Ajax Amsterdam disclosed hackers exploited IT vulnerabilities to access personal data of several hundred individuals.

CISA Warns of Active Exploits Targeting Langflow AI Framework

CISA added CVE-2026-33017 to its Known Exploited Vulnerabilities catalog after confirming active exploitation of a critical code injection flaw in Langflow.

Chinese APT Red Menshen Embeds in Telecom Networks

China-linked Red Menshen threat group maintains persistent access in global telecom infrastructure for government espionage operations.

UK Sanctions Xinbi Marketplace for Selling Stolen Data

UK's FCDO sanctioned Xinbi, a Chinese cryptocurrency marketplace selling stolen data and satellite equipment to Southeast Asian scam networks.

TikTok Business Accounts Hit by Bot-Evading Phishing Campaign

Cybercriminals are targeting TikTok for Business accounts with sophisticated phishing attacks designed to bypass automated security detection systems.

Hightower Holding Breach Exposes 130,000 SSNs

Hightower Holding confirms data breach affecting 130,000 individuals with stolen Social Security numbers and driver's license data.

BIND DNS Patches Critical Memory Leak Vulnerabilities

Internet Systems Consortium releases BIND updates fixing high-severity memory leak vulnerabilities affecting DNS resolvers worldwide.

Claude Chrome Extension Flaw Enabled Silent Prompt Injection

Anthropic's Claude Chrome extension contained a vulnerability allowing websites to inject malicious prompts without user interaction or consent.

Coruna Exploit Kit Reuses Operation Triangulation iOS Attacks

Security researchers discovered the Coruna exploit kit leveraging zero-click iMessage exploits from 2023's Operation Triangulation campaign targeting iPhones.

Chinese APT Deploys Kernel Implants in Telecom Infrastructure

State-sponsored Chinese hackers infiltrated telecom backbone infrastructure using kernel implants and passive backdoors for long-term espionage operations.

Russian Police Arrest LeakBase Forum Owner in Taganrog

Russian authorities arrested the alleged owner of LeakBase, a major cybercriminal marketplace for stolen data and hacking tools.

Cisco Patches Critical IOS Vulnerabilities in March 2026

Cisco released security patches for multiple high and medium-severity vulnerabilities affecting IOS software that could enable privilege escalation and secure boot bypass.

RedLine Infostealer Admin Extradited to US for Prosecution

Armenian suspect extradited to United States faces criminal charges for allegedly managing RedLine infostealer malware operations targeting millions globally.

Torg Grabber Malware Targets 850 Browser Extensions

New Torg Grabber info-stealer compromises 850 browser extensions including 700+ cryptocurrency wallets expanding threat landscape significantly.