Warlock Ransomware Gang Exploits SharePoint Vulnerabilities, Targeting Water Utility and Telecom Provider in Coordinated Attacks A sophisticated ransomware group, linked to China, has been wreaking havoc on organizations across Europe, Africa, and Latin America over the past two months. The Warlock gang has exploited vulnerabilities in Microsoft SharePoint to gain initial access, leaving a trail … Read more
A recent data breach at edtech company Frontline Education has exposed sensitive information about school district employees across the United States. The breach, which was discovered on August 14, 2026, allowed unauthorized access to a portion of Frontline’s systems through a vulnerability in third-party software. As a result, thousands of employees’ Social Security numbers, email … Read more
Dell’s Cybersecurity Module for Kubernetes, a tool designed to streamline security configurations and monitoring, has been found vulnerable to severe flaws that grant unauthenticated administrators full access to affected nodes. The discovery underscores the importance of robust identity management in preventing lateral movement and breach escalation. The vulnerabilities, identified in Dell’s CSM (Cybersecurity Module) version … Read more
A sophisticated cyber espionage campaign, codenamed “China-Nexus,” has been uncovered, leveraging a previously unknown backdoor known as Antino. This malicious tool exploits vulnerabilities in Microsoft’s Office 365 suite, specifically targeting Outlook and OneDrive users in China. The discovery of Antino was made by researchers who analyzed a series of high-profile cyber attacks that have left … Read more
A critical vulnerability in GitLab’s AI Gateway has been patched, allowing attackers to execute arbitrary commands on self-hosted servers. The flaw, designated as 9.9, was discovered and reported to GitLab by a researcher, who chose to remain anonymous. As a result of the patch, users of self-hosted GitLab installations are advised to update their AI … Read more
A Highly Evasive Ransomware Group Exploits SharePoint Vulnerabilities, Targeting Utilities and Governments Across Europe, Africa, and Latin America A sophisticated China-linked ransomware group, known as Warlock, has been wreaking havoc on critical infrastructure across multiple continents. Over the past two months, this highly evasive threat actor has successfully breached a water utility, a telecom provider, … Read more
Frontline Education Breach Exposes School District Employee Data A major edtech company has announced a significant data breach that could affect thousands of school district employees across the United States. Frontline Education, which provides administration and workforce management software to schools, revealed that attackers exploited a vulnerability in third-party software to gain unauthorized access to … Read more
A Critical Flaw in Dell’s CSM Puts Kubernetes Clusters at Risk of Total Compromise Dell’s Cloud Storage Management (CSM) platform has been found to contain a critical vulnerability that allows unauthenticated attackers to gain administrator access and even root on Kubernetes nodes. This alarming flaw, if exploited, could grant malicious actors complete control over the … Read more
A sophisticated cyber espionage campaign has been uncovered, leveraging a previously unknown backdoor called Antino to compromise Outlook and OneDrive accounts in China. This malicious toolchain is being used by threat actors to gain unauthorized access to sensitive information, marking a significant escalation in the ongoing cat-and-mouse game between state-sponsored attackers and their targets. At … Read more
Critical Flaw in GitLab’s AI Gateway Exposes Self-Hosted Servers to Command Execution Vulnerability A critical vulnerability has been discovered in GitLab’s 9.9 AI Gateway, a tool used for automating and optimizing software development workflows. The issue allows attackers to execute arbitrary commands on self-hosted servers, putting sensitive data at risk of being compromised. The flaw … Read more