A Resurgent Banking Trojan Threatens Mexico’s Financial Sector The Grandoreiro banking Trojan has emerged from its apparent hiatus, targeting users in Mexico with a new campaign that showcases its authors’ determination to evade detection and stay one step ahead of security measures. This resurgence is a stark reminder that cyber threats never truly disappear – … Read more
Personal Data of SickKids Employees and Job Applicants Exposed in Cybersecurity Incident The Hospital for Sick Children (SickKids) has disclosed a cybersecurity incident that has exposed the personal information of current and former employees, as well as job applicants. The breach occurred due to a flaw in third-party software used by the hospital, which also … Read more
Malware Authors Unveil Sneaky FTP Server Exploit: A Threat Lurking in Plain Sight Threat actors have discovered a novel way to deliver malicious code, abusing FTP server banners to evade detection and compromise Windows systems. Researchers at SOCRadar have been tracking this technique since early July 2026, warning that the approach is not only stealthy … Read more
A high-severity vulnerability in Microsoft’s Entra ID identity and access management platform has been exploited by attackers, prompting a maximum-severity patch from the tech giant. The flaw, tracked as CVE-2026-69836, allows unauthorized attackers to execute code over a network, potentially giving them control of sensitive systems. The Entra ID platform is used by millions of … Read more
A critical security update from Cisco has brought attention to a set of vulnerabilities that could allow attackers to gain elevated privileges and access sensitive data. The company’s patches address nine flaws in its Crosswork and Secure Workload products, with five of them scoring a maximum 10.0 on the Common Vulnerability Scoring System (CVSS). These … Read more
Cybersecurity Training Falls Short as Cybercrime Continues to Evolve A recent incident in Texas highlighted the importance of adequate cybersecurity training for law enforcement. Malware was discovered hidden within body camera footage uploaded by police, putting sensitive data at risk as it traveled through the chain of command. This is just one example of how … Read more
The Hospital for Sick Children in Toronto has disclosed a data breach that exposed personal information of current and former employees, job applicants, and possibly others. The breach was caused by a vulnerability in third-party software used by the hospital and other organizations. According to SickKids, the incident allowed unauthorized access to employee data on … Read more
As threat actors continue to find new and creative ways to deliver malware, researchers have uncovered a novel technique being used to distribute two previously undocumented remote access trojans (RATs) named E4del and PINHOLE. By exploiting FTP server banners, hackers are able to hide malicious commands that instruct the malware stager on what actions to … Read more
Microsoft has issued a critical security patch to fix a maximum-severity vulnerability in its Entra ID identity and access management (IAM) platform, which has already been exploited by attackers. The bug, tracked as CVE-2026-69836, allowed threat actors with no privileges to gain code execution on the system, making it a serious concern for organizations using … Read more
A newly disclosed vulnerability in GitLab’s code repository management tool, identified as CVE-2026-19478, has been actively exploited by attackers just days after its public disclosure. The exploit allows malicious actors to escape restricted areas of a network and gain elevated access to sensitive systems, making it a top priority for organizations using the platform. The … Read more