CloudZ RAT Exploits Microsoft Phone Link to Steal OTPs
Overview Researchers have uncovered a new variant of the CloudZ remote access tool (RAT) that deploys a malicious plugin called Pheno. This plugin hijacks the […]
Month: May 2026
Supply Chain Attack Hits SAP npm Packages with Mini Shai‑Hulud Worm
Overview A new supply chain attack has compromised the SAP developer ecosystem by weaponizing official npm packages. The campaign, linked to the Mini Shai‑Hulud worm, […]
Microsoft Defender False Positive Flags DigiCert Root Certificates
Overview A faulty Microsoft Defender antimalware signature update released around April 30, 2026, mistakenly flagged two legitimate DigiCert root certificates as malware. The detection, labeled […]
Silver Fox Expands Reach with ABCDoor Malware in Tax-Themed Phishing Campaigns
Overview The China-based cybercrime group Silver Fox has been linked to a new wave of phishing campaigns targeting organizations in India and Russia. These attacks […]
Critical MOVEit Automation Flaw Highlights Ongoing MFT Risks
Overview Progress Software has warned customers of a critical authentication bypass vulnerability in its MOVEit Automation managed file transfer (MFT) solution. Tracked as CVE‑2026‑4670, the […]
LLM vs RAG vs AI Agent vs Agentic AI — Choosing the Right AI for the Job
Artificial intelligence isn’t a single monolithic technology. Instead, it comes in layers of capability, each designed for different tasks. Understanding the distinctions between LLMs, RAG […]
Exim Mail Server Flaws Highlight DNS and Memory Risks
Overview The Exim development team has released version 4.99.2 to patch four newly discovered vulnerabilities that could allow attackers to crash servers, corrupt memory, or […]
Copy Fail — Linux Root Escalation Bug Added to KEV
Overview On May 3, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑31431, a critical Linux privilege escalation flaw, to its Known Exploited Vulnerabilities […]
Windows 11 April 2026 Update Breaks Third‑Party Backup Tools
Overview Microsoft’s April 2026 cumulative security update (KB5083769) for Windows 11 has introduced a serious regression in the Volume Shadow Copy Service (VSS), disrupting third‑party […]
ConsentFix v3 — Automated OAuth Abuse Against Azure
Overview A new attack technique, ConsentFix v3, has emerged on hacker forums as an automated evolution of earlier OAuth phishing methods. Building on ClickFix and […]