Hackers Disable Endpoint Protection
Overview A new intrusion campaign demonstrates how quickly attackers can transform a Windows domain into a launchpad for deeper compromise. Using the Sliver command‑and‑control beacon, […]
Month: September 2026
New Microsoft Defender ‘ShieldCrash’ Zero‑Day
Overview A new Microsoft Defender zero‑day exploit named ShieldCrash has been released by the anonymous researcher Nightmare Eclipse, just days after Microsoft’s September 2026 Patch […]
Hackers Build AI Frameworks
Overview Threat actors are moving beyond simple AI coding assistants and adopting multi‑agent frameworks that automate every stage of an attack. According to Google’s Threat […]
Panzer Ransomware
Overview A new ransomware‑as‑a‑service (RaaS) operation called Panzer has surfaced in Italy, targeting manufacturers and telecom firms with an ESXi‑ready encryptor. First observed on August […]
Microsoft 365 Data Theft
Overview Threat hunters have uncovered a widespread data theft and extortion campaign targeting Microsoft 365 and other SaaS platforms. The activity, tracked as PREY‑0058 by […]
Magento & Adobe Zero‑Day
Overview A newly discovered zero‑day vulnerability dubbed StyleSmuggler is being actively exploited against Magento and Adobe Commerce sites. First observed on September 4, 2026, the […]
Oracle Bug
Overview Security firm TantoSec has published a proof‑of‑concept exploit chain that turns an AES‑CBC padding oracle in Telerik UI for ASP.NET AJAX into unauthenticated remote […]
New ScreenConnect Flaw
Overview ConnectWise has issued a security advisory for a newly discovered ScreenConnect Remote Access vulnerability that currently has no patch available. The flaw affects both […]
Fake Minecraft Mods
Overview A counterfeit Minecraft optimisation mod has been discovered deploying Myth Stealer, a remote access trojan (RAT) designed to steal browser credentials, cookies, and sensitive […]
Attackers Hijack MikroTik
Overview CERT Polska has issued a warning that attackers are exploiting MikroTik routers with internet‑exposed SSH services to gain full administrative control without authentication. The […]