A pair of high-severity vulnerabilities affecting ClamAV, a widely-used open-source antivirus engine, have been disclosed by Cisco. The flaws, which were found in the ZIP archive parser, can be exploited to crash the scanning process and deny service (DoS) attacks, and proof-of-concept exploit code is already publicly available. The two vulnerabilities, tracked as CVE-2026-20337 and … Read more
A devastating wave of ransomware attacks is sweeping across the globe, targeting organizations with a previously unknown exploit that leverages vulnerabilities in Fortinet and Schneider Electric security products. Gunra Ransomware, a highly aggressive malware strain, has successfully breached networks of multiple companies, leaving a trail of destruction and financial loss in its wake. At the … Read more
Cybersecurity experts have sounded the alarm about a new threat vector that leverages malicious MCP servers to compromise sensitive information. The attack involves splitting instructions on these servers to make AI coding agents exfiltrate secrets, posing a significant risk to organizations and individuals with sensitive data. What’s most concerning is that this vulnerability can be … Read more
A new attack vector has emerged, allowing hackers to compromise Windows 11 systems with a single USB drive. Researchers have discovered a vulnerability in the operating system’s auto-install feature for unsigned drivers, which can be exploited to gain complete control over a targeted machine. This flaw affects all versions of Windows 11 and poses a … Read more
Cisco has issued a warning about two high-severity vulnerabilities affecting ClamAV, an open-source antivirus engine widely used to scan files for malware. The flaws allow unauthenticated attackers to crash the ClamAV scanning process in denial-of-service (DoS) attacks, and proof-of-concept exploit code is already publicly available. The security issues were discovered in the ZIP archive parser … Read more
A devastating cyberattack on a Polish power plant has left industry experts reeling, as hackers exploited a private cellular network to gain control of critical systems and shut down a turbine. The attack, which occurred in late July 2026, raises serious concerns about the vulnerability of industrial control systems (ICS) and highlights the need for … Read more
Gunra Ransomware Exploits Critical Flaws in Fortinet and Schneider Electric Devices, Breaching Networks Worldwide In a concerning wave of cyberattacks, Gunra ransomware has been linked to breaches across multiple industries, leveraging critical vulnerabilities in network security devices from Fortinet and Schneider Electric. The attacks have left organizations scrambling to contain the damage, with some still … Read more
Malicious MCP Servers Can Hijack AI Coding Agents, Exfiltrate Sensitive Data A disturbing trend has emerged in the cybersecurity landscape, where malicious servers are exploiting vulnerabilities in machine learning (ML) and artificial intelligence (AI) coding agents to exfiltrate sensitive data. This sophisticated threat vector involves compromised Multi-Cloud Platform (MCP) servers that can split instructions to … Read more
A Critical Flaw in Windows 11 Enables Full System Takeover via USB Drive Researchers have discovered a serious vulnerability in Windows 11 that allows an attacker to take full control of a system simply by inserting a malicious USB drive. The flaw, which resides in the operating system’s autorun feature, can be exploited remotely and … Read more
A Stealthy Threat Lurks in AI Accelerators and Neo-Clouds: Cybersecurity Blind Spots Exposed The rapid growth of artificial intelligence (AI) has led to a surge in the adoption of specialized chips known as accelerators, which are designed to speed up AI workloads. These accelerators are being used in conjunction with a new type of cloud … Read more