SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231,… Read More »SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw sat in… Read More »Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed… Read More »Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver… Read More »Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by… Read More »Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. “Its recovery ecosystem… Read More »DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was… Read More »Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. “Built on GPT‑5.6 Sol, it is trained… Read More »OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording. The onboarding paperwork… Read More »Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company’s own private… Read More »Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo