Tag: cybersecurity

VMware vCenter Vulnerability Exploited In Global Campaign Linked To Suspected China Nexus Threat Actor

Researchers have linked active exploitation of VMware vCenter vulnerability CVE 2026 59310 to a suspected China nexus threat actor deploying backdoors, reverse SSH tools and Babuk derived ransomware.

CTM360 Report Reveals Browser In Browser Recruitment Phishing Campaign Targeting Enterprise Accounts

CTM360 has uncovered a large scale recruitment phishing campaign using Browser In Browser credential traps, fake interview pages and live MFA relay attacks to target enterprise accounts.

Saudi Arabia AI Security Challenges Increase As Enterprise Adoption Accelerates

TrendAI Saudi Arabia Managing Director Wasna Ben Gassem says AI adoption is advancing faster than enterprise security frameworks, highlighting the need for stronger governance and unified cybersecurity.

Critical SAP Commerce Cloud Flaw CVE 2026 58231 Draws Early Exploitation Activity

Security researchers have observed exploitation attempts targeting SAP Commerce Cloud vulnerability CVE 2026 58231 only days after SAP released a patch for the critical remote code execution flaw.

Updated CoolClient Malware Uses Signed Windows Rootkit For Advanced Stealth

Kaspersky has identified a new CoolClient malware variant linked to Mustang Panda that deploys a signed Windows kernel rootkit to hide malicious activity and strengthen persistence on compromised systems.

Apple Issues Spyware Threat Notifications To Users Across 110 Countries

Apple has issued new spyware threat notifications to users in 110 countries, warning that mercenary spyware attacks continue to target journalists, activists, politicians, diplomats and other high risk individuals.

Active Exploitation Attempts Detected Against Unpatched GeoServer SQL Injection Flaw

Security researchers warn that a newly disclosed GeoServer zero day SQL injection vulnerability is being actively targeted and could lead to remote code execution on vulnerable systems.

Jewelbug Expands Cyber Espionage And Cryptocurrency Fraud Through XG Web Platform

Broadcom researchers reveal China linked Jewelbug using the XG Web platform to conduct cyber espionage against governments and militaries while operating cryptocurrency fraud campaigns.

Avanceon And ACET Solutions Join Forces To Strengthen OT Cybersecurity In Middle East And South Asia

Avanceon Middle East & South Asia and ACET Solutions have signed an exclusive partnership to strengthen OT cybersecurity and resilience across the Middle East and South Asia.

Microsoft Defender ShieldBreak Zero Day Demonstrates RoguePlanet Patch Bypass

A security researcher has released a proof of concept for ShieldBreak, a new Microsoft Defender zero day that reportedly bypasses the RoguePlanet patch and enables SYSTEM level privilege escalation.

SAP Releases Security Updates For Critical Commerce Cloud And NetWeaver Vulnerabilities

SAP has released security patches for multiple critical vulnerabilities, including a maximum severity flaw in Commerce Cloud that could allow unauthenticated attackers to execute arbitrary code.

OpenAI Expands Daybreak Cyber Partner Program With Global Security Companies

OpenAI has expanded its Daybreak Cyber Partner Program, enabling leading cybersecurity firms to integrate advanced cyber AI models into security operations, vulnerability management, and incident response services.

Recent articles

spot_img