-
The FBI and U.S. Secret Service issued a joint cybersecurity advisory warning that operators of “FortiBleed” continue to target internet-facing Fortinet FortiGate firewalls and SSL VPN gateways to steal credentials, maintain unauthorized ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server file…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compre…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A campaign that uses more than 100 compromised websites to distribute LUNEXSTEALER, a Windows infostealer that installs a browser extension giving attackers remote control. The extension, LUNARAXE, masquerades as “Microsoft Office Word Editor” inside C…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other is…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A prolonged Partisan Zmiy intrusion into a medical organization, exposing an updated malware toolkit that combined Telegram command channels, DNS tunneling, and scheduled payload execution. Investigators joined the response in December 2025 and traced …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Russia-aligned threat actor Earth Sirrush has sustained spear-phishing operations against Ukrainian government, defense, border security, and logistics organizations since at least 2022. TrendAI Research’s analysis, covering activity through July 2026,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers have discovered a fleet of AI agents using Tencent Cloud infrastructure to circumvent Amap’s anti-bot protections and collect entrance-level navigation statistics. Their preliminary report, published on October 4, 2026, links this act…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Rockstar Games’ breach history illustrates how stolen identities, trusted integrations and exposed development assets can undermine enterprise defenses without a perimeter exploit. A September 2026 Lares analysis connects the incidents, although severa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
