Cyber Security

Check Point Warns of Widespread Exploitation of Security Gateway VPN Flaw Cybersecurity company Check Point has confirmed that hackers are actively exploiting a pair of pre-authentication vulnerabilities in its Security Gateway product, which enables secure remote access through virtual private networks (VPNs). The vulnerability, tracked as CVE-2026-85102, affects the certificate-handling functionality of the VPN and … Read more

A New Android Malware Threat Erupts in Europe and Canada, Targeting Banking Credentials with Sophisticated Tactics Cybersecurity researchers have uncovered a new Android malware-as-a-service (MaaS) platform called RemControl, which is wreaking havoc on users in Europe and Canada. This highly sophisticated threat exploits vulnerabilities in the TVTap IPTV application to deliver phishing overlays designed to … Read more

A Popular Placeholder Domain Now Spreads Malware via Fake Cloudflare Page A disturbing trend has emerged in the world of cybersecurity, where a commonly used placeholder domain is being exploited by attackers to spread malware. The “third-party.com” domain, often employed as a generic example hostname in developer documentation and code examples, has been hijacked to … Read more

Cybersecurity researchers have uncovered a sophisticated attack vector, where malicious Terraform providers are being used to deliver Go malware through HashiCorp’s registry. The attackers exploit a trusted infrastructure, making it increasingly challenging for organizations to detect and respond to these threats. The affected parties include users of HashiCorp’s Terraform cloud-agnostic infrastructure as code platform. Terraform … Read more

Cybersecurity company Check Point has confirmed that hackers are actively exploiting two vulnerabilities in its Security Gateway product, allowing attackers to execute code remotely and gain unauthorized access. The affected flaws, tracked as CVE-2026-85102 and CVE-2026-93616, impact the VPN certificate-handling functionality and Management web service, respectively. The Dutch Nationaal Cyber Security Centrum (NCSC) had alerted … Read more

A severe vulnerability in Ubuntu Linux, left unpatched by the distribution’s developers, has been exploited by hackers to escape host-root containers and gain unauthorized access to underlying systems. The flaw, which affects all supported versions of Ubuntu, allows attackers to bypass security restrictions and move laterally within a network, compromising sensitive data and potentially leading … Read more

MikroTik Routers Left Vulnerable to Takeover by Hackers, No Password Required A severe vulnerability in MikroTik routers has been exposed, allowing hackers to gain unauthorized access and take control of these devices without needing a password or SSH key. The issue, dubbed “MikroTrick Chain Let,” affects millions of users worldwide, including individuals, businesses, and organizations … Read more

A critical security vulnerability has been discovered in GitLab, a popular web-based platform for software development and collaboration. The flaw, which was reported through an issue email address that has since been leaked, allows any user with access to push code and run continuous integration (CI) jobs as if they were the actual project owner. … Read more

A sophisticated attack campaign has been uncovered, where hackers are exploiting a vulnerability in the Terraform infrastructure as code (IaC) tool to deliver Go malware through the HashiCorp Registry. The malicious activity is particularly concerning due to its potential to expose sensitive data and compromise entire networks. The attackers have created fake Terraform providers that … Read more

Malicious AI agents have been unleashed on hundreds of online retailers, stealing more than 600,000 credit card records and infecting over 100 websites with skimmers. The attacks are carried out by financially motivated threat actors using open-source AI agent frameworks to target vulnerable companies at scale. The campaign has been ongoing since at least July, … Read more