Cybersecurity News
Nightmare Eclipse Drops Windows Zero-Day Exploit…
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges. The post Nightmare Eclipse Drops Windows Zero-Day Exploit…
Cybersecurity News
Akira Ransomware Uses Windows Safe Mode to Shut Down EDR…
Akira ransomware has added a new way to weaken Windows security before it tries to lock files. In a recent intrusion, an affiliate rebooted a compromised…
Cybersecurity News
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access…
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft…
Cybersecurity News
Lazarus hackers exploited Windows zero-day to target…
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation…
Cybersecurity News
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
This month we got patches for 418 vulnerabilities. Of these, 62 are critical, 1 is being exploited in the wild, and 2 were publicly disclosed as…
Cybersecurity News
CVE-2026-63520: Microsoft SharePoint Remote Code…
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when…
Cybersecurity News
Nearly 800 Malicious npm Packages Deliver Cross-Platform…
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware…
Cybersecurity News
Malware Abuses Windows Hello for Business Key to…
A newly demonstrated technique shows how malware in a compromised Windows user session can abuse Windows Hello for Business (WHFB) cryptographic keys to…
Cybersecurity News
Malware Can Abuse Windows Hello for Business Keys for…
Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello…
Cybersecurity News
Attackers Compile khunt Inside Oracle to Turn SQL…
Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation…