UNC3753 Targets US Law Firms with Vishing and RMM Tools 2026-06-06 True Lucas Martin True Malspam Campaign Uses DoubleClick Redirects to Deliver .NET Loader 2026-06-06 True Lucas Martin True CISA Warns of Exploited SolarWinds Serv-U Vulnerability 2026-06-06 True Lucas Martin True Critical UniFi OS Flaws Enable Auth Bypass and Command Execution 2026-06-06 True Lucas Martin True China-Linked Group Deploys Custom ASPX and ASHX Web Shells 2026-06-06 True Lucas Martin True Hackers Impersonate Ghidra, dnSpy, and SpiderFoot to Spread Malware 2026-06-04 True Varshini True Malicious binding.gyp Campaign Targets npm Packages Across Maintainer Accounts 2026-06-04 True Varshini True Hackers Deploy FlutterShell Backdoor Through Malvertising Campaigns 2026-06-04 True Varshini True Cybercriminals Impersonate Claude Code to Deploy Fileless .NET Infostealer 2026-06-04 True Varshini True IronWorm Campaign Targets Developers Through Malicious npm Packages 2026-06-04 True Varshini True Stock Exchange Executive’s Outlook Account Targeted in Credential Theft Attack 2026-06-04 True Varshini True Proofpoint Warns TA4922 Deploys Atlas RAT and Multiple Malware Loaders 2026-06-04 True Varshini True Phishing Campaigns Evolve as Cybercriminals Turn to Infostealer Malware 2026-06-04 True Varshini True Comodo Internet Security 0-Day Vulnerability Can Crash Windows Systems 2026-06-04 True Lucas Martin True PAN-OS GlobalProtect Authentication Bypass Flaw Under Active Exploitation 2026-05-30 True Lucas Martin True SideCopy APT Deploys XenoRAT to Target Afghanistan Finance Ministry 2026-05-30 True Lucas Martin True GREYVIBE Hackers Use ChatGPT and Gemini to Power Cyberattacks 2026-05-29 True Lucas Martin True Malicious Sites Track Users Through SSD Timing Side-Channel Attacks 2026-05-28 True Lucas Martin True Hackers Use LLM Agent to Pivot From marimo RCE to Internal Database 2026-05-28 True Varshini True Critical Notepad++ Vulnerability Enables Arbitrary Code Execution 2026-05-28 True Lucas Martin True Critical Roundcube Flaw Allows Attackers to Inject SQL Queries 2026-05-28 True Lucas Martin True Preinstalled Motorola App Hijacks Amazon to Inject Affiliate Codes 2026-05-28 True Lucas Martin True Threat Actor’s GitHub Token Leaked by AI-Generated npm Malware 2026-05-28 True Varshini True ClearFake Uses BSC Testnet Smart Contracts for Resilient C2 Operations 2026-05-28 True Varshini True PureLogs Malware Variant Abuses MSBuild.exe for Process Hollowing Attacks 2026-05-28 True Varshini True BadHost Exploit Exposes Sensitive AI Agent Server Endpoints 2026-05-27 True Lucas Martin True CISA Warns of Exploited LiteSpeed cPanel Plugin Flaw 2026-05-27 True Lucas Martin True TeamPCP Hackers Weaponize LiteLLM for Credential Harvesting Attacks 2026-05-27 True Varshini True 300+ Fake Domains Used in GHOST STADIUM Campaign Targeting World Cup Fans 2026-05-27 True Varshini True Tycoon 2FA AiTM Kit Targets Entra ID and Google Workspace In MFA Bypass Campaigns 2026-05-27 True Varshini True New BTMOB Malware Enables Remote Control of Android Devices 2026-05-27 True Lucas Martin True Windows Kernel Flaw Lets Attackers Modify Memory Counters 2026-05-27 True Lucas Martin True Grandoreiro Malware Campaign Hits Banks and Latin American Companies 2026-05-27 True Varshini True Cybercriminals Weaponize AI App Installers to Deliver DinDoor Backdoor 2026-05-27 True Varshini True Malicious npm RAT Campaign Delivers Persistent Backdoor Access 2026-05-27 True Varshini True Microsoft SharePoint Flaw Enables Remote Code Execution Attacks 2026-05-26 True Lucas Martin True India’s CERT-In Urges Rapid Patching of Exposed System Vulnerabilities 2026-05-26 True Varshini True ConnectWise Automate Flaw Allows Attackers To Bypass Security Checks 2026-05-26 True Lucas Martin True Critical Memcached SASL Flaw Lets Attackers Infer Usernames 2026-05-26 True Lucas Martin True Threat Actors Abuse Fileless Execution to Spread Quasar Linux RAT 2026-05-26 True Varshini True China-Linked Hackers Target Southeast Asian Edge Routers 2026-05-26 True Varshini True Apache CXF LDAP Injection Flaw Exposes Arbitrary Certificates 2026-05-26 True Lucas Martin True PuTTY 0.84 Fixes SSH KEX Crashes and Telnet Spoofing Flaw 2026-05-26 True Lucas Martin True Ghost CMS Flaw Abused to Poison 700 Websites With ClickFix Malware 2026-05-26 True Varshini True Claude Mythos Expansion Planned Through Claude Code, Security Tools 2026-05-26 True Lucas Martin True Russian Hacker Used Jailbroken Gemini to Steal Crypto Wallets 2026-05-26 True Lucas Martin True Angular Language Service Flaws Enable Remote Code Execution 2026-05-26 True Lucas Martin True Cybercriminals Abuse SEO Poisoning To Spread Fake Gemini CLI Installers 2026-05-26 True Varshini True Unencrypted WhatsApp Chats Found on Apple macOS and iOS Devices 2026-05-25 True Lucas Martin True Threat Actor Compromised 233 Versions of Laravel-Lang Packages by Hacking 700 GitHub Repos 2026-05-23 True Lucas Martin True 
