A newly discovered Windows zero-day flaw, dubbed LegacyHive, has left Microsoft scrambling to address the issue despite already releasing its July 2026 Patch Tuesday updates. The vulnerability allows attackers to escalate privileges on up-to-date Windows systems, putting millions of users at risk. The bug was found by a security researcher using the handle Nightmare Eclipse … Read more
In a major crackdown on FIFA World Cup piracy, US authorities have seized over 1,000 websites and blocked nearly 2,000 domains used to stream matches without authorization. The operation, dubbed “Operation Offsides,” is part of a joint effort between law enforcement agencies, entertainment networks, and the Motion Picture Association’s Alliance for Creativity and Entertainment (ACE) … Read more
LG Smart TVs to Ban Residential Proxies in App Store Following Security Concerns In a move aimed at strengthening its users’ online security, LG Electronics USA has announced plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. This decision comes on the heels of … Read more
Critical Infrastructure Under Siege: Closing Identity Gaps to Prevent Disruption The 2021 Colonial Pipeline ransomware attack was a stark reminder of the devastating consequences of compromised accounts and lax security measures in critical infrastructure. The attackers, reportedly exploiting an inactive VPN account without multi-factor authentication (MFA), disrupted fuel supply across the U.S. East Coast, causing … Read more
A Critical Vulnerability Suite Exploited to Install Webshells on Vulnerable WordPress Sites Hackers have been actively exploiting a critical vulnerability suite, dubbed “wp2shell,” affecting WordPress Core. The exploit chain takes advantage of two vulnerabilities, identified as CVE-2026-63030 and CVE-2026-60137, which allow remote attackers to execute code on vulnerable installations without authentication. The issue stems from … Read more
Coca-Cola’s Fairlife Dairy Subsidiary Hit by Anubis Ransomware, Threatened with Data Leak The Anubis ransomware gang has claimed responsibility for a cyberattack on Coca-Cola’s Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom. This brazen move highlights the growing threat of ransomware gangs using data theft as leverage … Read more
A Sophisticated Malware Campaign Exploits GitHub Repositories, Infiltrating Public AI Registries and Catalogs In a brazen and highly sophisticated operation, attackers have created over 7,600 malicious GitHub repositories to distribute SmartLoader and StealC malware. Dubbed the “FakeGit” campaign, this large-scale effort has accumulated more than 14 million downloads from public download counters on the platform. … Read more
Global Phishing Platform Dismantled, Developer Arrested in Multi-Agency Operation A major blow has been dealt to the world of cybercrime as authorities in Germany and the US have dismantled a vast phishing platform known as Kratos, shutting down its central infrastructure and arresting its developer. The operation, led by Frankfurt’s Prosecutor General Office (ZIT) and … Read more
Critical Infrastructure Under Siege: How State-Backed Actors Are Exploiting Identity Gaps The 2021 Colonial Pipeline ransomware attack was a stark reminder of how quickly a compromised account can turn into a national crisis. The attackers exploited an inactive VPN account without multi-factor authentication, disrupting fuel supply across the U.S. East Coast and highlighting the vulnerability … Read more
A critical vulnerability in Microsoft SharePoint is being actively exploited by hackers to steal machine keys and maintain access even after affected servers are patched. The flaw, known as CVE-2026-50522, allows remote attackers to execute code on vulnerable systems without authentication. This can be done by delivering a malicious payload through a specially crafted security … Read more