Microsoft recently revealed details of two cybercrime campaigns involving the exploitation of third-party email infrastructure to conduct financial fraud scams and using passkey-themed social engineering to compromise cloud environments. The first campaign saw threat actors sending over a million scam …
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Read More »
î „Ravie Lakshmananî ‚Sep 12, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified five security vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. These vulnerabilities have been actively exploited in the wild, prompting CISA to …
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV Read More »
î „Ravie Lakshmanan î ‚Sep 11, 2026 Vulnerability / Web Security GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: …
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure Read More »
164 Austin, Texas / USA, September 9th, 2026, CyberNewswire Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them. SpyCloud, the leader in identity threat protection, today released …
The U.S. Department of Justice (DoJ) made an announcement on Wednesday regarding coordinated actions taken against an illicit online marketplace known as Xinbi Guarantee. These actions included seizing Telegram channels used by the service, confiscating two cryptocurrency wallets, and deploying …
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto Read More »
62 Boston, MA, USA, September 8th, 2026, CyberNewswire Specialized team of AI agents that discover, attack, and validate web vulnerabilities, leveraging pre-existing site context to eliminate noise and speed remediation. Reflectiz, the continuous web exposure management company, today launched a …
Cybersecurity experts have recently exposed a sophisticated Chromium-based post-exploitation toolkit known as PEEP, posing as a bookmarks extension for web browsers. Requiring prior administrative or code execution access, PEEP’s installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store …
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution Read More »
î „Swati Khandelwalî ‚Sep 06, 2026Vulnerability / Network Security Recent reports indicate that attackers are taking advantage of vulnerabilities in MikroTik routers, specifically targeting the Secure Shell (SSH) remote-access service. This exploit allows unauthorized access without the need for authentication, as highlighted …
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication Read More »
Exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce, attackers are able to run malicious code on an online store’s server without the need to log in. This flaw, named StyleSmuggler by Dutch e-commerce security company Sansec, …
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores Read More »
Microsoft has issued a warning about a widespread phishing campaign that is utilizing invisible Unicode tag characters to evade email filters. According to the Microsoft Security Research team, the attacker is using these characters to split financial lure words like …
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters Read More »
