8+ hour, 28+ min ago   (27+ words) Let Hackers Forge Admin Access Most enterprise security teams pour their energy into hardening customer-facing apps — and …...

21+ hour, 25+ min ago   (416+ words) Silverfort frames the incident as a warning specifically about identity security. Its analysis argues that automated, AI-driven credential harvesting and lateral movement can escalate to domain-admin control far faster than most organizations’ detection and response processes are built to handle,…...

1+ day, 2+ hour ago   (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...

20+ hour, 28+ min ago   (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...

2+ day, 19+ hour ago   (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...

2+ day, 8+ hour ago   (603+ words) JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access…...

3+ day, 5+ hour ago   (642+ words) A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities…...

3+ day, 9+ hour ago   (229+ words) GoNintendo Latest Switch firmware update fixes exploit that could cause remote attacks Hit the road, hack Nintendo updated the Switch and Switch 2 firmware to Ver. 23.0.0 last night and it brought with it a ton of exciting features for Switch 2, and…...

3+ day, 11+ hour ago   (345+ words) U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog More Capable AI, Not Enough Guardrails A New Claude 's Sandbox Failure Shows How AI Can Rationalize Real-World Harm U.S. CISA adds Microsoft Windows, N-able…...

3+ day, 16+ hour ago   (130+ words) oodaloop.com Informing your decisions with actionable intelligence Home > Briefs > Cyber > Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks Fortinet RCE flaw exploited to deploy PivotC2 backdoor. Attackers are abusing a heap‑based buffer overflow in FortiOS and FortiSwitchManager to install…...