macOS Malware Forces Users to Reveal Login Passwords
Overview Researchers at Group‑IB have uncovered a new macOS information‑stealing malware dubbed ClickLock, which uses coercive social engineering loops to trap victims into entering their […]
Month: July 2026
Exploited Oracle E-Business Flaw
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive requiring federal agencies to patch a critical Oracle E-Business Suite (EBS) […]
Hijacked 20+ Brazilian Websites
Overview Researchers at ANY.RUN have uncovered a large‑scale PhantomEnigma campaign that hijacked more than 20 Brazilian government websites to deliver malware. By exploiting trusted .gov.br […]
OpenAI Launches GPT‑Red
Overview OpenAI has unveiled GPT‑Red, an internal automated red‑teaming model designed to identify and remediate prompt injection vulnerabilities in GPT‑5.6 Sol. This innovation addresses a […]
Zoom Vulnerability in Windows Clients
Overview Zoom has issued a critical security advisory for a vulnerability in its Windows desktop client and SDK, warning that attackers could exploit the flaw […]
Exploited SharePoint
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning that attackers are actively exploiting three SharePoint Server vulnerabilities — […]
Fake NVIDIA Software!
Overview Researchers at Blackpoint Cyber’s Adversary Pursuit Group (APG) have uncovered a new Rust-based remote access tool (RAT) dubbed LabubaRAT, which disguises itself as legitimate […]
Microsoft Patches 622 Flaws
Overview Microsoft’s July 2026 Patch Tuesday is its largest on record, addressing 622 CVEs — more than triple June’s previous high. Among them are two […]
SonicWall SMA 1000 Zero‑Days
Overview SonicWall has issued an urgent advisory warning of active exploitation of two zero‑day vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances. One […]
Cisco IOS Vulnerability Actively Exploited
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about active exploitation of CVE‑2008‑4128, a cross‑site request forgery (CSRF) vulnerability in […]