A High-Severity Vulnerability in Roundcube Webmail Client is Being Exploited by Attackers Threat actors have been exploiting a critical vulnerability in Roundcube, a widely used open-source webmail client, according to warnings from the Canadian Centre for Cyber Security. The vulnerability, tracked as CVE-2026-48842, allows attackers to inject malicious SQL code into databases without needing to … Read more
Russia’s Hybrid Cyber-Physical War in Europe Escalates, Threatening Critical Infrastructure and National Security A growing threat is unfolding across Europe as Russia continues to employ its hybrid cyber-physical warfare strategy against nations supporting Ukraine. Recorded Future has identified a surge in psychological, cyber, and physical tactics aimed at degrading critical infrastructure, spreading fear among governments … Read more
A Critical Flaw in WSO2 and Adobe Commerce Platforms Exposes Thousands of Users to Cyber Attacks Thousands of businesses using WSO2 and Adobe Commerce platforms are under threat due to a recently discovered critical flaw that allows hackers to exploit sensitive information. The vulnerability, which has been added to the US Cybersecurity and Infrastructure Security … Read more
Cloudflare recently patched a vulnerability that allowed an attacker to access sensitive data from another customer’s container, highlighting the ongoing threat of cloud-based security breaches. The issue was discovered in Cloudflare’s Argo Smart Routing technology, which uses containers to optimize and secure internet traffic. The flaw was found in how containers are isolated from one … Read more
A $4 Billion Agentic AI App Exposes Users to Data Theft Risks A critical vulnerability in Manus, a popular agentic AI app, has left millions of users exposed to potential data theft and compromise. Researchers at Salt Labs have disclosed a prompt-injection bug that allows attackers to execute malicious code in a user’s environment, compromising … Read more
A previously unknown threat actor has been exploiting a common security blind spot in Microsoft 365 (M365) environments to steal enterprise data from organizations in Chile. The attackers have been using a technique called TeamFiltration, an open-source toolkit that allows them to gain access to sensitive information without breaching employee accounts. According to researchers at … Read more
As organizations continue to grapple with the challenges of remote workforces, edge computing, and cybersecurity operations, a new framework has emerged as a potential solution: Secure Access Service Edge (SASE). While SASE has shown promise in addressing security concerns at the intersection of on-premises, cloud, and edge systems, adopting it comes with its own set … Read more
Summer 2026 was marked by a trio of cyber threats that sent shockwaves through the industry and left enterprise defenders scrambling to adapt. At the forefront of this new reality are autonomous agents like those unleashed by OpenAI on Hugging Face, a devastating ransomware attack on dairy company Fairlife, and Iranian-linked threat actors compromising a … Read more
A malicious variant of the remote access Trojan (RAT) called SectopRAT has been discovered hiding inside a legitimate audio application, underscoring the need for organizations to monitor the behavior of applications rather than blindly trusting them. Researchers at Fortinet found that the attackers had added the malware after the legitimate software was installed on customer … Read more
A $4 Billion AI App’s Achilles Heel: How a Simple Bug Could Have Led to Catastrophic Consequences A vulnerability in a popular artificial intelligence (AI) platform, Manus, has exposed the dark side of the rapidly growing field of agentic AI apps. A prompt-injection bug, discovered by researchers at Salt Labs, could have allowed attackers to … Read more