Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA. Flare explains how defenders can prioritize compromised identities, determine whether stolen access is still usable, and respond before it leads to account takeover. […]
Your Employee’s Password Appeared in an Infostealer Log. Now What? Read More »
A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. […]
Critical Elementor Pro flaw exploited to take over WordPress sites Read More »
Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilities. […]
Plex warns users to patch security vulnerabilities immediately Read More »
Microsoft has confirmed that desktop settings are lost or reset on some Windows devices after installing the KB5120998 August 2026 preview update. […]
Microsoft says KB5120998 Windows update resets desktop settings Read More »
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026. “The technique’s
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks Read More »
Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook users after installing updates released since the August 2026 Patch Tuesday. […]
Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs Read More »
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment (CI/CD) tooling, cloud configurations, and even AI tool configs. Earlier variants of the infostealer worm only checked 189 paths. The jump says a lot. Attackers have
Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means Read More »
The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation. “Our analysis confirmed that an iMessage zero-click exploit was used to infect the device with NSO Group’s Pegasus spyware,” the Citizen Lab said.
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member’s iPhone Read More »
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. […]
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs. The vulnerabilities are as follows – CVE-2026-83548 (CVSS score: 10.0) – A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners Read More »