Lotus Wiper Malware Targets Venezuelan Energy Infrastructure
Overview Researchers have uncovered Lotus Wiper, a destructive malware campaign targeting Venezuela’s energy and utilities sector at the end of 2025 and early 2026. Unlike […]
Month: April 2026
1,370+ SharePoint Servers Still Exposed to Spoofing Attacks
Overview A critical spoofing vulnerability in Microsoft SharePoint Server (CVE‑2026‑32201) remains unpatched on more than 1,370 internet‑facing servers worldwide, despite being added to CISA’s Known […]
Microsoft Issues Emergency Fixes for Critical ASP.NET Core Vulnerability
Overview Microsoft has released out‑of‑band (OOB) security updates to patch a critical flaw in ASP.NET Core Data Protection APIs. The vulnerability, tracked as CVE‑2026‑40372, could […]
Nightmare‑Eclipse Tools Exploited via FortiGate SSL VPN Access
Overview Security researchers have confirmed the first in‑the‑wild use of Nightmare‑Eclipse privilege escalation tools — BlueHammer, RedSun, and UnDefend — following unauthorized access through a […]
Comment and Control: Prompt Injection Turns GitHub Comments into Credential Theft
Overview Researchers have disclosed a critical cross‑vendor vulnerability class dubbed “Comment and Control”, which weaponizes GitHub pull request titles, issue bodies, and comments to hijack […]
FakeWallet Campaign: Crypto-Stealing Apps Infiltrate Apple’s China App Store
Overview Security researchers have uncovered a major infiltration of Apple’s App Store in China, where 26 malicious apps impersonated popular cryptocurrency wallets like Metamask, Coinbase, […]
Exchange Online Migration Incident EX1280763: Stuck Sync States and Resource Errors
Overview Microsoft has announced incident EX1280763, confirming that migrations to and from Exchange Online — including tenant‑to‑tenant onboarding and offboarding — are currently failing. Admins […]
AI Meets Manual Trades: Plumbing, Building, and the Future of Skilled Work
Overview Artificial Intelligence is often associated with digital industries, but its potential impact on manual trades like plumbing, construction, and building is profound. While these […]
MiningDropper: Android Malware Framework Driving Infostealers and RATs
Overview Researchers have uncovered a fast‑growing Android malware campaign leveraging a framework called MiningDropper. Unlike single malicious apps, MiningDropper acts as a multi‑stage delivery system, […]
ZionSiphon Malware: Politically Motivated Attacks on Israeli Water Infrastructure
Overview Researchers have uncovered ZionSiphon, a new malware strain designed to target Israeli water treatment and desalination systems. First detected in June 2025, shortly after […]