Gitlab’s Private Email Addresses Expose Users to Supply Chain Attacks A new research report from Aikido Security has uncovered a critical vulnerability in GitLab’s DevOps platform, allowing attackers to exploit private email addresses and gain access to an organization’s entire project portfolio. The issue stems from the way GitLab automatically assigns unique email addresses to … Read more
A newly discovered technique has been found to evade endpoint detection and response (EDR) tools by injecting malicious code into process initialization structures without using the Windows APIs typically monitored by security software. Dubbed “process parameter poisoning,” this evasion method was first described in July, but recent research from Flashpoint reveals it’s even more effective … Read more
Arista Networks has issued a critical security update to address a zero-day vulnerability in its VeloCloud Orchestrator (VCO) platform. The flaw, identified as CVE-2026-93952, is being actively exploited by remote threat actors and affects on-premises deployments of VCO where certificate-based authentication is configured. The issue lies in an improper input validation weakness that allows attackers … Read more
Cloud Credentials in Jeopardy: How a Single Kubernetes YAML Can Grant Access to an Entire GCP Organization A recent security vulnerability has been discovered in the way Google’s Kubernetes Config Connector (KCC) manages cloud credentials for developers. In a surprising twist, it appears that an attacker with limited access to a Kubernetes namespace can escalate … Read more
Cyberattacks on Network Management Systems Leave Enterprises Vulnerable to Devastating Consequences A recent surge in targeted attacks against network management systems has left many enterprises scrambling to patch critical vulnerabilities, as malicious actors exploit weaknesses in these critical infrastructure components. According to a warning from InfraTrust, the latest edition of their monthly report tracking security … Read more
A Highly Automated Credit Card Heist: AI-Powered Attackers Steal 600,000 Records and Infect Hundreds of Sites In a disturbing demonstration of the evolving cyber threat landscape, a financially motivated attacker is using open-source artificial intelligence (AI) agent frameworks to launch a massive campaign against online retailers. Since at least July, this sophisticated operation has resulted … Read more
A Critical WordPress Flaw is Being Exploited by Hackers, Leaving Thousands of Sites Vulnerable In a concerning development, hackers have begun exploiting a recently patched critical vulnerability in WordPress, allowing them to write files to disk that execute shell commands when accessed. The flaw, identified as CVE-2026-87902, was discovered by security researcher Robert Ressl and … Read more
A New Wave of Android Malware Targets European and Canadian Users with Sophisticated Phishing Overlays A highly advanced Android banking malware platform has been discovered, targeting users in Europe, Canada, and several Middle Eastern countries. Dubbed RemControl, this malware-as-a-service (MaaS) uses a combination of artificial intelligence (AI), malvertising campaigns, and phishing overlays to steal sensitive … Read more
Malicious Use of Placeholder Domain Tricks Windows Users into Running PowerShell Commands A concerning trend has emerged in the cybersecurity landscape, where a commonly used placeholder domain is being exploited by attackers to distribute malware. The “third-party.com” domain, often used as an arbitrary external website or service in developer documentation and code examples, has been … Read more
Network Management Systems Under Siege as Attackers Exploit Critical Vulnerabilities A recent report from Eclypsium’s InfraTrust Pulse has revealed that network management systems are increasingly being targeted by attackers, with devastating consequences. The monthly report tracks security advisories affecting various infrastructure components, and the latest edition paints a worrying picture of the vulnerability landscape. Between … Read more