The Psychedelic Stealer: When a CAPTCHA Becomes an Installer 2026-09-24 75 Arctic Wolf Labs True Check Point VPN Critical RCE Vulnerabilities CVE-2026-85102 & CVE-2026-85103 2026-09-14 75 Arctic Wolf Labs True The Trillion-Dollar AI Bet Needs a Security Strategy 2026-08-31 75 Dan Schiappa True Dark Caracal Reloaded: New Malware, Same Hunting Grounds 2026-08-26 88 Arctic Wolf Labs True Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak) 2026-08-12 90 Arctic Wolf Labs True Payroll Pirates: Strange New Tides in Business Email Compromise 2026-08-06 75 Arctic Wolf Labs True Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection 2026-07-28 75 Arctic Wolf Labs True Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection 2026-07-27 78 Arctic Wolf Labs True What the OpenAI–Hugging Face Incident Really Tells Us 2026-07-22 70 Laura Grace Ellis True Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware 2026-07-20 85 Arctic Wolf Labs True CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited 2026-01-28 85 Julian Tuin True CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited 2026-01-28 75 Julian Tuin True Microsoft Patch Tuesday: January 2026 2026-01-15 50 Andres Ramos True CVE-2025-64155: FortiSIEM Remote Unauthenticated Command Injection Vulnerability 2026-01-15 75 Andres Ramos True Microsoft Patch Tuesday: January 2026 2026-01-13 30 Andres Ramos True CVE-2025-14847: MongoBleed Information Disclosure Vulnerability Exploited in the Wild 2025-12-29 85 Julian Tuin True CVE-2025-14847: MongoBleed Information Disclosure Vulnerability Exploited in the Wild 2025-12-29 85 Julian Tuin True CVE-2025-20393: Threat Campaign Targeting Cisco Secure Email Gateway, Cisco Secure Email and Web Manager 2025-12-19 90 Julian Tuin True CVE-2025-20393: Threat Campaign Targeting Cisco Secure Email Gateway, Cisco Secure Email and Web Manager 2025-12-19 75 Julian Tuin True CVE-2025-14733: WatchGuard Firebox iked Out of Bounds Write Vulnerability Exploited in the Wild 2025-12-19 85 Andres Ramos True New Attack Technique “ConsentFix” Hijacks OAuth Consent Grants 2025-12-16 70 Andres Ramos True Arctic Wolf Observes Malicious SSO Logins on FortiGate Devices Following Disclosure of CVE-2025-59718 and CVE-2025-59719 2025-12-16 80 Arctic Wolf Labs True Arctic Wolf Observes Malicious SSO Logins on FortiGate Devices Following Disclosure of CVE-2025-59718 and CVE-2025-59719 2025-12-15 80 Arctic Wolf Labs True Microsoft Patch Tuesday: December 2025 2025-12-10 60 Andres Ramos True Microsoft Patch Tuesday: December 2025 2025-12-10 30 Andres Ramos True CVE-2025-59718 and CVE-2025-59719: FortiCloud SSO Login Authentication Bypass 2025-12-10 70 Julian Tuin True CVE-2025-55182: Critical Remote Code Execution Vulnerability Found in React Server Components 2025-12-04 75 Stefan Hostetler True CVE-2025-55182: Critical Remote Code Execution Vulnerability Found in React Server Components 2025-12-04 75 Stefan Hostetler True Shai-Hulud Malware Targets Numerous NPM Packages in Second-Wave NPM Supply-Chain Attack 2025-11-25 88 Andres Ramos True How To Combat AI-Enhanced Social Engineering Attacks 2025-11-25 75 Arctic Wolf True How To Combat AI-Enhanced Social Engineering Attacks 2025-11-25 70 Arctic Wolf True Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine 2025-11-25 85 Jacob Faires and the Arctic Wolf Labs team True Trojan Horse 2025-11-12 15 Arctic Wolf True Microsoft Patch Tuesday: November 2025 2025-11-12 45 Andres Ramos True What’s Behind The Rise of Spear Phishing Attacks on IT Leaders? 2025-11-11 65 Arctic Wolf True What’s Behind The Rise of Spear Phishing Attacks on IT Leaders? 2025-11-11 65 Arctic Wolf True Microsoft Releases Emergency Patch for Exploited Critical Remote Code Execution Vulnerability (CVE-2025-59287) 2025-10-24 85 Andres Ramos True Brazilian Caminho Loader Employs LSB Steganography and Fileless Execution to Deliver Multiple Malware Families Across South America, Africa, and Eastern Europe 2025-10-21 78 Arctic Wolf Labs True Business Email Compromise (BEC) 2025-09-30 45 Arctic Wolf True Cryptojacking 2025-09-30 35 Arctic Wolf True September 2025 Update on Aggressive Ongoing Akira Ransomware Campaign 2025-09-26 78 Stefan Hostetler True SonicWall Warns Customers of Data Exposure Incident Affecting MySonicWall Configuration Backup Files 2025-09-17 70 Julian Tuin True SonicWall Warns Customers of Data Exposure Incident Affecting MySonicWall Configuration Backup Files 2025-09-17 70 Julian Tuin True Arctic Wolf 2025 Security Operations Report Reveals Threat Landscape Acceleration, Majority of Security Alerts Now Occur Outside Working Hours 2025-09-16 50 Arctic Wolf True Microsoft Patch Tuesday: September 2025 2025-09-10 35 Andres Ramos True Widespread Salesforce Data Theft via Compromised Salesloft Drift OAuth Tokens 2025-08-27 70 Andres Ramos True Widespread Salesforce Data Theft via Compromised Salesloft Drift OAuth Tokens 2025-08-27 70 Andres Ramos True Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN – Copy 2025-08-01 78 Julian Tuin True Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN 2025-08-01 75 Julian Tuin True 8 Types of Social Engineering Attacks 2025-07-03 30 Sule Tatar True 
