A major blow has been dealt to a notorious data extortion group, with authorities arresting three alleged members and seizing their infrastructure. The operation, dubbed “Operation KillSwitch,” was a globally coordinated effort involving 10 countries and private cybersecurity companies. At the center of this operation is KillSec, a group that made headlines for its brazen … Read more
The US Treasury Department has dealt a significant blow to the notorious Tren de Aragua (TdA) gang, blacklisting its alleged mastermind and several associates in connection with a string of ATM jackpotting attacks that have left a trail of destruction across the United States. Anibal Alexander Canelon Aguirre, aka “Prometheus,” is now on the hook … Read more
A Critical Fortinet Vulnerability Has Been Exploited in the Wild, Urgent Action Required The US Cybersecurity and Infrastructure Security Agency (CISA) and Fortinet have sounded the alarm on a severe vulnerability in FortiMail that has already been exploited by threat actors. The zero-day flaw, tracked as CVE-2026-104286 with a CVSS score of 9.8, allows attackers … Read more
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes A devastating zero-day vulnerability has been discovered in FortiMail, a popular email security gateway solution used by numerous organizations worldwide. The flaw, which allows unauthenticated attackers to write arbitrary files on the affected system, has already been exploited in targeted attacks, putting sensitive … Read more
A Critical Update for Android Users: Advanced Protection Locks Down Accessibility Services Google has quietly rolled out an important security update for Android devices, introducing a new feature that locks down accessibility services to only verified tools. This change aims to prevent malicious apps from exploiting accessibility features to gain elevated privileges on affected devices. … Read more
The Dutch Institute for Vulnerability Disclosure (DIVD) has been hacked in a sophisticated AI-powered attack that exploited two previously unknown vulnerabilities in the open-source user support platform Zammad. The attackers used this combination of flaws to gain unauthorized access, hijack sessions, and escalate privileges to root level in mere seconds. The hack occurred on September … Read more
Kevin Mandia’s Armadin Raises $255 Million in Latest Funding Round, Valuation Surges to $2.5 Billion In a significant development that underscores the growing importance of AI-powered cybersecurity solutions, Kevin Mandia’s startup Armadin has secured a massive $255 million funding injection at a staggering valuation of $2.5 billion. This latest investment brings the company’s total raised … Read more
A High-Severity Zimbra Vulnerability Was Exploited Before Public Disclosure, Leaving Users Exposed to Remote Code Execution Attacks In a disturbing example of how quickly cyber threats can be exploited in the wild, hackers began targeting a high-severity vulnerability in the popular email collaboration suite Zimbra Collaboration Suite (ZCS) just days after patches were rolled out. … Read more
As the cybersecurity landscape continues to evolve at breakneck speed, a recent phenomenon has been making headlines in the industry: the rise of “virtual patching” made possible by advanced AI tools. But is this supposed revolution really new? Or are we simply rebranding established security best practices with flashy names? The truth is that virtual … Read more
A Zero-Day Flaw in FortiMail Puts Organizations at Risk of Unauthenticated File Writes A critical zero-day vulnerability has been exploited in attacks against organizations using FortiMail, a popular email security appliance. The flaw, which allows unauthenticated arbitrary file writes, has significant implications for anyone relying on the software to protect their email communications. FortiMail is … Read more