CyberNews

CISA Confirms Ransomware Gangs Exploit SonicWall SMA1000 Flaws, Despite Patches A critical vulnerability in SonicWall’s enterprise-grade secure remote access gateway, the SMA1000, has been confirmed to be actively exploited by ransomware gangs. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the two flaws to its Known Exploited Vulnerabilities (KEV) Catalog, warning that the … Read more

TrueConf Server Flaws Exposed, Client Installers Hijacked in Sophisticated Attack A sophisticated cyberattack has been uncovered, where hackers exploited vulnerabilities in TrueConf server software to replace client installers with a malicious payload called PhantomCore. The attack, which affects users of the popular video conferencing platform, highlights the importance of secure server-side configurations and underscores the … Read more

As we continue to move further into an era of rapid technological advancements, the risk of identity exposure has become a pressing concern for organizations worldwide. A recent webinar highlighted 11 real-life stories where compromised identities were used to unlock active attack paths, resulting in devastating consequences for those affected. The concept of cross-domain privilege … Read more

A new wave of Passkey attacks has emerged, putting users’ sensitive data at risk by exploiting a vulnerability in password managers that sync private keys across devices. These sophisticated attacks can not only recover synced private keys but also bypass even the most secure multi-factor authentication (MFA) systems. The targeted threat actors use complex methods … Read more

Kimsuky, a North Korean threat group, has been spotted building an offline AI-powered toolset designed to supercharge its phishing and malware development capabilities. This new arsenal, dubbed “offline AI stack,” is poised to significantly amplify Kimsuky’s attack vectors, putting organizations at increased risk of cyber compromise. At the heart of this toolset lies a sophisticated … Read more

A pair of critical vulnerabilities in SonicWall’s SMA1000 secure remote access gateway has been exploited by ransomware gangs, leaving countless organizations at risk. The flaws, which were patched by SonicWall in mid-July, have already been targeted in zero-day attacks, with threat actors deploying custom malware on vulnerable VPN appliances. The affected vulnerabilities, tracked as CVE-2026-15409 … Read more

TrueConf Server Vulnerabilities Allow Malicious Installers to Slip In Undetected A concerning report has emerged of vulnerabilities in TrueConf servers being exploited by attackers to inject malicious client installers, raising questions about the security posture of organizations that use these conferencing platforms. According to sources, at least 11 companies have fallen prey to this tactic, … Read more

Identity Exposure Unleashes Devastating Chain Reactions in Cyberattacks A disturbing trend has emerged in the world of cybercrime, where identity exposure is being used as a stepping stone to launch devastating attacks. The alarming reality is that once an attacker gains access to sensitive information about an individual or organization, they can exploit it to … Read more

A new class of attacks has emerged, targeting sensitive information stored in password managers and multi-factor authentication (MFA) systems. Dubbed “Passkey Attacks,” these exploits can recover synced private keys or bypass phishing-resistant MFA, leaving users vulnerable to credential theft and identity compromise. The Passkey Attack methodology relies on exploiting a previously unknown vulnerability in the … Read more

Kimsuky’s Stealthy Offline AI Stack Exposes Millions to Phishing and Malware Attacks A sophisticated cyber threat actor group, Kimsuky, has been building an offline artificial intelligence (AI) stack that enables them to boost phishing attacks and automate malware development. This disturbing capability puts millions of individuals at risk, highlighting the evolving nature of cyber threats. … Read more