Mirage2FA: The Phishing Service Turning a Stolen Microsoft 365 Cookie Into Full Account Takeover 2026-08-27 True Balaji True Chinese-Speaking Hackers Exploit Known Flaws to Steal Philippine Nuclear and Naval Data 2026-08-27 True Varshini True Hackers Target LiteLLM, RAGFlow and Kestra AI Infrastructure to Steal API Keys and Mine Crypto 2026-08-27 True Varshini True Aurora Ransomware Affiliate Uses Cursor AI to Plan Attacks Against 20+ Organizations 2026-08-27 True Varshini True Russia-Linked Cyber Espionage Clusters Use OAuth Phishing to Target U.S. and European Organizations 2026-08-27 True Varshini True SLEEPWALKER Backdoor Uses SMB, ICMP, DNS and VMware VMCI for Covert Communications 2026-08-27 True Varshini True AI-Powered AnonyMousKIT PhaaS Steals Apple IDs and 2FA Codes to Unlock Stolen iPhones 2026-08-27 True Varshini True Critical WatchGuard Agent Flaws Let Remote Attackers Execute Arbitrary Code 2026-08-26 True Tamilselvan True Google Chrome 152 Patches 327 Security Flaws, Including 10 Critical Bugs 2026-08-26 True Tamilselvan True Microsoft SharePoint Flaws Chain to Unauthenticated Remote Code Execution 2026-08-26 True Tamilselvan True NVIDIA NemoClaw Flaw Lets Attackers Hijack AI Agents Through DNS Rebinding 2026-08-26 True Tamilselvan True Critical WordPress TranslatePress Bug Enables Complete Site Takeover 2026-08-26 True Tamilselvan True SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root 2026-08-26 True Tamilselvan True OpenSSL Patches Nine Vulnerabilities Enabling Remote Denial-of-Service Attacks 2026-08-26 True Tamilselvan True MuddyWater-Linked Dindoor Backdoor Abuses Legitimate Deno Runtime to Evade Detection 2026-08-26 True Varshini True Balonx Sistema PhaaS Targets 20+ Mexican Banks With AI Vishing and Android RAT 2026-08-26 True Varshini True Researchers Find 28,000 Exposed Git Repositories Leaking API Keys, Bank Details and Corporate Secrets 2026-08-26 True Varshini True New WordlistLoader Hides Malicious Shellcode in English Words to Deploy Amatera Stealer 2026-08-26 True Varshini True New CoreRAT Malware Lets Core Werewolf Hackers Take Full Control of Compromised Systems 2026-08-26 True Varshini True CISA Red Team Compromises Active Directory and Critical Business Systems 2026-08-26 True Tamilselvan True Tata B2B Platform Flaw Lets Attackers Bypass OTP and Take Over Accounts 2026-08-25 True Tamilselvan True Critical Zscaler Client Connector Vulnerability Allows Remote Code Execution Without Login 2026-08-25 True Tamilselvan True AI Agents Crack 85 Government Accounts and Steal 2,500+ Personnel Records 2026-08-25 True Tamilselvan True Linux Botnet Uses NVIDIA NIM to Turn Host Telemetry Into Actionable Attack Commands 2026-08-25 True Varshini True Hackers Access ASOS Customer Accounts Using Stolen Login Credentials 2026-08-25 True Tamilselvan True Fake Microsoft Scanner Secretly Sends Victim Banking and Remote Access Data to Telegram 2026-08-25 True Varshini True Critical Spring GraphQL Deserialization Flaw Enables Remote Code Execution 2026-08-25 True Tamilselvan True Critical WordPress SAML SSO Flaws Enable Unauthenticated Admin Account Takeover 2026-08-25 True Tamilselvan True PavinLoader Abuses MSBuild and Trojanized .NET DLLs in Multi-Stage Malware Attacks 2026-08-25 True Varshini True Fake OpenAI Codex Installer Tricks Mac Users Into Pasting Malware Into Terminal 2026-08-25 True Varshini True AI-Powered EvilTokens Turns Hijacked Microsoft Accounts Into Financial Fraud 2026-08-25 True Varshini True Vidar Uses Victims’ Own Browsers to Extract Data Protected by Browser Encryption 2026-08-25 True Varshini True Hackers Poison Google Search With Fake Minecraft Sites to Spread WeedHack Malware 2026-08-25 True Varshini True TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution 2026-08-25 True Tamilselvan True CISA Warns Oracle HTTP Server Flaw Lets Unauthenticated Attackers Access and Modify Critical Data 2026-08-25 True Tamilselvan True Five GlobalProtect Vulnerabilities Expose Enterprise VPN Users to Privilege Escalation 2026-08-25 True Tamilselvan True Hackers Use Chameleon SEO Poisoning to Hide Banking Phishing Pages From Security Scanners 2026-08-24 True Kavichselvan True ReliaQuest Thwarts Social Engineering Attack Using Fake SSO and MFA Push Abuse 2026-08-24 True Tamilselvan True Kimsuky Hackers Use AI-Generated Chrome Extension to Steal Gmail Data 2026-08-24 True Tamilselvan True Open VSX Unblocks 3 Extension IDs Used in Malware Campaign, Complicating Threat Tracking 2026-08-24 True Kavichselvan True BADBOX-Linked MoYu Hackers Abuse Android Car Head Unit Updates to Build Proxy Botnet 2026-08-24 True Kavichselvan True RedC2 AI-Powered Linux Malware Delivered Through Malicious npm Packages 2026-08-24 True Kavichselvan True SynkLoader Malware Spreads Through Microsoft Teams Phishing and Steals Windows Passwords 2026-08-24 True Tamilselvan True Actively Exploited Zimbra Flaw Lets Unauthenticated Attackers Execute Shell Commands 2026-08-24 True Tamilselvan True Windows 11 Update Triggers Game Crashes on Systems With RGB Lighting Drivers 2026-08-24 True Tamilselvan True Critical WordPress Pods Flaw Lets Unauthenticated Attackers Gain Admin Access 2026-08-24 True Tamilselvan True Critical Node.js Sandbox Flaw Exposes AI Agents to Host Code Execution 2026-08-24 True Tamilselvan True Iranian-Linked Hackers Disrupt UK Energy Infrastructure in Four-Day Attack 2026-08-24 True Tamilselvan True Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week 2026-08-23 True Balaji True Chinese Hacker Uses DeepSeek AI to Automate Vulnerability Exploitation 2026-08-22 True Tamilselvan True 
