A Global Threat Campaign Exploits Critical VMware vCenter Flaw, Leaving Victims Vulnerable Despite Patching In a disturbing example of how quickly attackers can move on newly disclosed vulnerabilities, a single threat actor has been exploiting a critical flaw in VMware’s vCenter software since just days after its public disclosure. The vulnerability, CVE-2026–59310, allows an attacker … Read more
A recently uncovered Akira ransomware attack highlights a clever tactic employed by hackers to disable endpoint detection and response (EDR) solutions, allowing them to steal data without encryption. The attackers obtained initial access through an exposed SonicWall VPN device without multi-factor authentication (MFA), before disabling the EDR solution on a compromised system by restarting it … Read more
Ukrainian Authorities Shut Down 94 Large-Scale Fraudulent Call Centers in Major Operation In a significant crackdown on organized crime, authorities in Ukraine have shut down an impressive 94 fraudulent call centers across the country. The operation, which involved multiple law enforcement agencies and resulted in millions of dollars being seized, is a major blow to … Read more
A Critical Vulnerability in WordPress Allows Attackers to Execute Code Remotely WordPress, one of the most widely used content management systems (CMS) online, has just patched a high-severity vulnerability that enables authenticated attackers to execute arbitrary code on affected sites. The issue, tracked as CVE-2026-65640 with a CVSS score of 8.8, affects only installations that … Read more
VMware vCenter Users Warned of Critical Flaw Exploitation for Reverse SSH Access A critical vulnerability (CVE-2026-59310) in VMware vCenter’s Syslog Server has been actively exploited by attackers to gain persistence and remote access to compromised systems. The issue, patched on July 29, is being used to deploy a reverse SSH tool, which allows the threat … Read more
The AI Watermark Conundrum: A Flood of “Removers” with Uncertain Effectiveness A flurry of tools and services has emerged in recent days, claiming to remove AI watermarks from text generated by language models like Anthropic’s Claude. However, an examination of these offerings reveals a concerning trend: despite their bold claims, none can prove that they … Read more
A recently disclosed Windows zero-day vulnerability, dubbed “LegacyHive,” has been patched by Microsoft as part of its August Patch Tuesday updates. The security flaw, which affects all supported versions of Windows, allows attackers to gain administrator privileges on compromised systems. This is particularly concerning given that the exploit requires only additional credentials from an attacker, … Read more
A Sophisticated Hacker Group Combines Espionage with Crypto Fraud In a brazen display of cybercrime capabilities, the Jewelbug hacker group has been uncovered conducting espionage operations against governments and militaries while simultaneously engaging in large-scale cryptocurrency fraud. The dual-pronged approach not only highlights the group’s advanced technical skills but also raises concerns about the potential … Read more
WordPress has released an emergency patch to fix a high-severity vulnerability that can allow attackers with Author-level user permissions or higher to execute arbitrary code remotely. The issue, tracked as CVE-2026-65640, affects only WordPress installations that use Imagick and Ghostscript, and requires an attacker to have file upload rights. The vulnerability stems from the way … Read more
A Critical VMware Flaw is Being Actively Exploited for Remote Access, With 361 Systems Compromised Across 47 Countries A critical vulnerability in VMware vCenter Syslog Server has been spotted being exploited by attackers to gain remote access and persistence on compromised systems. The flaw, identified as CVE-2026-59310, was patched by Broadcom just last month, but … Read more