Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code
Tech giants General Electric (GE) and Philips have also confirmed they’re investigating claims that the Clop ransomware gang breached their systems and stole data. […]
Philips and GE investigating Clop ransomware data theft claims Read More »
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals. […]
French tax authority data breach affects 678,000 individuals Read More »
Microsoft is working on a security patch for the “ShieldBreak” zero-day vulnerability disclosed last week by security researcher “Nightmare Eclipse” and now tracked as CVE-2026-69414. […]
Microsoft working on Defender patch for ShieldBreak zero-day Read More »
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. […]
SafePal data breach impacts 39,798 customers, stolen info for sale Read More »
Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic services. […]
Anthropic confirms Claude is down in major outage affecting multiple services Read More »
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. […]
Large-scale DDoS attacks disrupted Threema secure messaging service Read More »
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim’s web browser. […]
New AmnesiaStealer macOS malware hijacks browser sessions via remote control Read More »
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release Read More »
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India. The activity, per Check Point Research, is part of Operation Dream Job, a long-running
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor Read More »