Attackers are now exploiting a critical vulnerability in Cisco’s Unified Communications Manager (Unified CM) software, despite patches being released just over a month ago. This development highlights the ongoing threat of cyberattacks on business communication systems and emphasizes the importance of prompt patching and security measures. Unified CM is a central control system used by … Read more
A devastating credential theft campaign, dubbed FortiBleed, has been linked to notorious ransomware operations Inc and Lynx. The attack, which leverages vulnerabilities in enterprise security solutions, has compromised sensitive information from numerous organizations worldwide, leaving businesses scrambling to contain the damage. At its core, FortiBleed exploits a specific weakness in Fortinet’s SSL/TLS (Secure Sockets Layer/Transport … Read more
A sophisticated AI-powered attack has leveraged a previously unknown vulnerability in Langflow, an open-source framework for natural language processing, to automate a database ransomware assault on several high-profile targets. The AI agent exploited the Remote Code Execution (RCE) flaw, dubbed “LangFlow-1,” to breach sensitive databases and encrypt crucial data. The exploitation of LangFlow-1 marks a … Read more
Major events like sports championships, festivals, and government celebrations attract global attention, but they also come with significant cybersecurity risks. These threats don’t appear out of nowhere; rather, they’re often well-planned and executed by malicious actors who begin gathering intelligence months or even years in advance. When we think about event security, our minds often … Read more
Cybercriminals are using a new and insidious attack vector called “phantom squatting” to threaten the software supply chain. By exploiting the tendency of large language models (LLMs) to “hallucinate” or generate fictional web domains for legitimate brands, attackers can register nonexistent domains linked to these brands, creating a perfect trap for unsuspecting users. The technique … Read more
Medtronic Hit by ShinyHunters Data Breach, Exposing Sensitive Customer Information to Hackers Medical device firm Medtronic has notified customers that their personal data was compromised in a recent data breach attributed to the notorious hacking group ShinyHunters. The company’s IT systems were breached between April 13 and April 19, allowing hackers to access sensitive customer … Read more
A Critical SharePoint Vulnerability Has Been Actively Exploited, Leaving Thousands of Organizations Exposed The US Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed vulnerability, CVE-2026-45659, to its Known Exploitable Vulnerabilities catalog. This remote code execution (RCE) flaw affects SharePoint, a widely used collaboration platform, and has already been exploited by attackers in … Read more
A new and highly sophisticated malware strain, dubbed ChocoPoC RAT, has been discovered preying on vulnerability researchers who use Proof of Concept (PoC) exploit repositories online. The attackers behind this malicious campaign are targeting researchers who work with vulnerable software, luring them into downloading fake PoC exploits that secretly install the ChocoPoC Remote Access Trojan … Read more
**Major Events Face Unseen Cyber Threats Before the First Guest Arrives** The summer of 2026 is packed with high-profile events that will draw global audiences and intense scrutiny. But behind the scenes, security teams are working tirelessly to prevent potential cyber threats from turning these gatherings into disaster scenarios. The threat landscape around major events … Read more
A New AI-Driven Threat Emerges in Software Supply Chain: ‘Phantom Squatting’ Cybercriminals have discovered a novel way to compromise software supply chains using large language models (LLMs) that “hallucinate” fictional web domains for legitimate brands. This emerging threat, dubbed “phantom squatting,” allows attackers to register nonexistent domains linked to well-known companies and use them to … Read more