Threat actors are moving swiftly to exploit a critical vulnerability in JFrog’s Artifactory repository manager, just days after its public disclosure. The flaw, identified as CVE-2026-82329, allows an unauthenticated attacker to gain administrative access to affected systems with no user interaction required. JFrog disclosed the vulnerability on August 28 and released patched versions of the … Read more
A massive data breach at Aesto Health has compromised the sensitive information of over 9.5 million individuals, highlighting the ongoing vulnerabilities in the healthcare industry’s digital infrastructure. The attack, which occurred between December 2 and December 18 last year, involved an unauthorized actor accessing protected health information stored within Aesto’s network. Aesto Health provides software-as-a-service … Read more
Cyberattackers Exploit Faronics Deploy to Install Malicious Remote Access Tool A sophisticated phishing campaign has been discovered abusing a legitimate endpoint management platform, Faronics Deploy, to gain unauthorized access to victim computers and install a remote support software. Researchers at Huntress, a managed detection and response company, uncovered the scheme, which targeted over 457 endpoints … Read more
The dark web has given birth to a new identity theft service that’s selling digital scans of over 153 million drivers’ licenses from the United States and Canada. This staggering number was confirmed by interviews with individuals whose licenses are available for purchase on this service, which claims to have obtained these images from an … Read more
Nearly 22,000 Microsoft Exchange Servers at Risk of Hijack Attacks as Patch Remains Unapplied A staggering number of Microsoft Exchange servers remain unpatched against a critical security flaw that allows attackers to hijack user mailboxes. According to recent findings by Shadowserver, a threat intelligence watchdog group, nearly 22,000 Exchange servers are still vulnerable to the … Read more
A Critical Vulnerability in Langflow Framework Exposes OpenAI and AWS Keys to Attackers Threat actors have been exploiting a critical vulnerability in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys from vulnerable instances. According to threat intelligence firm VulnCheck, over 360 attacks were detected on its honeypots in the … Read more
A massive data breach at Aesto Health has compromised sensitive information for over 9.5 million individuals, sparking concerns about the security of healthcare organizations’ patient data. The company, which provides software-as-a-service solutions to help healthcare providers manage electronic health records, disclosed the attack in a recent statement. The breach occurred between December 2 and 18, … Read more
**Brazilian Payment Systems Hit by Sophisticated Fraud Scheme** A recent wave of coordinated attacks on Brazilian payment systems has left hundreds of unsuspecting victims financially exposed. Breeze Comet, a highly sophisticated malware strain, has been successfully used to execute massive numbers of fraudulent transactions across multiple platforms. The attackers’ modus operandi is centered around exploiting … Read more
A Critical Flaw in JFrog Artifactory Exposed to Admin Token Theft, Just Days After Patch In a shocking display of speed and determination, attackers have exploited a critical vulnerability in JFrog’s Artifactory software just days after its disclosure. The flaw allows unauthorized access to admin tokens, which can grant malicious actors complete control over the … Read more
A staggering 22,000 Microsoft Exchange servers remain unpatched and vulnerable to hijack attacks, leaving users’ email accounts at risk of being taken over by attackers. The security flaw, tracked as CVE-2026-62911, affects Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software, allowing authorized attackers to elevate privileges and gain control over … Read more