The Eviltokens kit represents a significant threat, revolutionizing the landscape of device-code phishing. This kit creates a ‘complete business email compromise (BEC) operations environment,’ according to a Talos researcher. Cybercriminals utilize this tool to exploit vulnerabilities, streamline attacks, and increase their potential reward. By focusing on device-code phishing, the kit takes advantage of a critical […]
A critical vulnerability in Oracle E-Business Suite, identified as CVE-2026-46817, is currently under active attack, with approximately 950 systems exposed. Defused Cyber researchers reported that this flaw, affecting Oracle Payments versions 12.2.3 through 12.2.15, allows attackers to take over systems without authentication via HTTP. Although Oracle addressed this issue in its latest Critical Patch Update, […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a new vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities catalog. Identified as CVE-2026-45659, this high-severity flaw carries a CVSS score of 8.8. The issue allows remote code execution due to the deserialization of untrusted data, posing significant security risks for users. CISA […]
Adobe has issued a crucial security update to address significant vulnerabilities in ColdFusion 2025 and 2023. These Adobe ColdFusion flaws, rated Priority 1, pose a risk for arbitrary code execution and privilege escalation. Affected versions include ColdFusion 2025 Update 9 and earlier, and ColdFusion 2023 Update 20 and earlier. The company strongly advises users to […]
Microsoft pulls forward its post-quantum cryptography timeline, setting a new target for 2029. This acceleration stems from recent advancements in quantum computing, which pose a growing threat to traditional encryption methods. Microsoft Azure’s Chief Technology Officer, Mark Russinovich, emphasized that these developments have altered the risk landscape. The tech giant is underscoring the urgency to […]
Amazon has agreed to pay a $2.25 million civil penalty following an allegation from the U.S. Federal Trade Commission (FTC) that the company obstructed identity theft victims from accessing crucial transaction records. The settlement stems from charges that Amazon intentionally withheld this information, which could aid victims in managing the impact of fraudulent activity on […]
Apple has issued crucial updates for iOS, macOS, and Safari to patch numerous vulnerabilities that could affect users of iPhone, iPad, Mac, and its web browser. The company focused on strengthening security in several key components, including WebKit, the kernel, WebRTC, and Web Extensions. These vulnerabilities posed significant risks by potentially allowing attackers to execute […]
Cisco has announced its intention to acquire WideField Security, a strategic move that aims to enhance Splunk’s Agentic Security Operations Center. By obtaining WideField, Cisco seeks to bolster its threat investigation capabilities, broadening the focus to include identity, credentials, sessions, and blast radius. This acquisition aligns with Cisco’s strategy to deliver comprehensive security solutions, reinforcing […]
A California man involved in drug trafficking on the dark web has received a federal prison sentence of over 26 years. The individual operated as a Nemesis Market vendor, distributing fentanyl and methamphetamine through one of the largest dark web marketplaces globally. Authorities have intensified their crackdown on these illicit operations due to the grave […]
The cybersecurity realm has been rocked by the emergence of Miasma malware, which has infiltrated 32 Red Hat packages through a compromised GitHub account. This breach raises alarms about the security of package repositories, especially when trusted platforms, such as GitHub, are involved. Experts warn that the incident highlights the critical need for developers to […]
A significant issue arose on June 6, 2026, when an Instagram flaw exposed unredacted user emails and phone numbers through the web-based password reset process. This flaw impacted all users, including high-profile figures like Meta CEO Mark Zuckerberg and model Georgina Rodriguez. Though Meta quickly released an emergency hotfix, proof-of-concept screenshots circulated online, highlighting the […]
Anthropic deploys engineers to assist the National Security Agency (NSA) in leveraging its advanced AI model, Mythos, for cybersecurity operations. Approximately six Anthropic engineers have reportedly joined the NSA to adapt the Mythos model for offensive cybersecurity tasks, such as network infiltration in countries like China and Iran. This collaboration raises questions because of Anthropic’s […]