A newly disclosed vulnerability in multiple Hikvision wireless access point models poses a high-severity risk to enterprise networks. The Hikvision AP flaw, tracked as CVE-2026-0709, allows attackers with valid credentials to execute arbitrary commands due to weak input validation within the WAP firmware. The vulnerability carries a CVSS v3.1 base score of 7.2. This flaw […]
A newly formed hacker coalition known as the Russian Legion has launched a coordinated cyberattack campaign against Denmark, targeting key sectors and government websites. The group, comprising Cardinal, The White Pulse, Russian Partizan, and Inteid, announced its formation on Jan. 27, 2026. Within 24 hours, it issued an ultimatum demanding that Denmark cancel a 1.5 […]
A malicious Google Play app disguised as a document reader has infected over 50,000 Android devices with a powerful banking trojan known as Anatsa. Security researchers at Zscaler ThreatLabz uncovered the app, which initially appeared legitimate but functioned as an installer for the malware. Once downloaded, Anatsa gained elevated permissions and deployed its full payload, […]
Russian-backed hackers from APT28 are exploiting a newly discovered Microsoft Office zero-day vulnerability, according to Ukraine’s CERT. The agency warned that APT28 exploits Microsoft Office through this flaw, moving from public disclosure to active use within days. The speed of the exploitation underscores the growing efficiency of targeted cyber threats. Security researchers say attackers are […]