**Ransomware Groups Exploit Legitimate Employees to Bypass Security Measures** A disturbing trend has emerged in the world of cybersecurity, as ransomware groups increasingly turn to recruiting from within organizations themselves. By targeting employees with legitimate access, these malicious actors can bypass even the strongest security measures and wreak havoc on a company’s data and finances. … Read more
Attackers Quickly Exploit Critical Artifactory Flaw After Disclosure, Putting Thousands at Risk A critical vulnerability in JFrog’s Artifactory repository manager has been publicly disclosed, and malicious actors are already taking advantage of it. The flaw, identified as CVE-2026-82329, allows attackers to bypass authentication and gain administrative access to affected systems with ease. This has significant … Read more
A Sneaky Phishing Campaign Exploits Faronics Deploy Platform, Installs Malicious ScreenConnect Software Phishing actors have been using a legitimate endpoint management platform to gain remote control over victim computers and install malicious software. The attackers are abusing the cloud-based Faronics Deploy platform, which is designed for IT administrators to manage and deploy software remotely. By … Read more
A massive identity theft operation has come to light, exposing over 153 million drivers licenses and other sensitive documents from individuals in the United States and Canada. The illicit service, dubbed “Nexus,” offers these digital scans for purchase on a notorious dark web forum called Exploit, with some records dating back to 2025. What’s more … Read more
Malicious Insiders Are Becoming a Growing Threat to Corporate Security A disturbing trend is emerging in the world of cybersecurity: malicious insiders are increasingly helping ransomware groups gain access to corporate networks, resulting in devastating financial losses and reputational damage. According to recent research, insider threats are on the rise, with 56% of incidents attributed … Read more
Threat actors are moving swiftly to exploit a critical vulnerability in JFrog’s Artifactory repository manager, just days after its public disclosure. The flaw, identified as CVE-2026-82329, allows an unauthenticated attacker to gain administrative access to affected systems with no user interaction required. JFrog disclosed the vulnerability on August 28 and released patched versions of the … Read more
A massive data breach at Aesto Health has compromised the sensitive information of over 9.5 million individuals, highlighting the ongoing vulnerabilities in the healthcare industry’s digital infrastructure. The attack, which occurred between December 2 and December 18 last year, involved an unauthorized actor accessing protected health information stored within Aesto’s network. Aesto Health provides software-as-a-service … Read more
Cyberattackers Exploit Faronics Deploy to Install Malicious Remote Access Tool A sophisticated phishing campaign has been discovered abusing a legitimate endpoint management platform, Faronics Deploy, to gain unauthorized access to victim computers and install a remote support software. Researchers at Huntress, a managed detection and response company, uncovered the scheme, which targeted over 457 endpoints … Read more
The dark web has given birth to a new identity theft service that’s selling digital scans of over 153 million drivers’ licenses from the United States and Canada. This staggering number was confirmed by interviews with individuals whose licenses are available for purchase on this service, which claims to have obtained these images from an … Read more
Nearly 22,000 Microsoft Exchange Servers at Risk of Hijack Attacks as Patch Remains Unapplied A staggering number of Microsoft Exchange servers remain unpatched against a critical security flaw that allows attackers to hijack user mailboxes. According to recent findings by Shadowserver, a threat intelligence watchdog group, nearly 22,000 Exchange servers are still vulnerable to the … Read more