A critical cybersecurity flaw has left FortiClientEMS hit by a serious SQL injection vulnerability, tracked as CVE-2026-21643. The issue affects Fortinet FortiClientEMS version 7.4.4 and allows remote attackers to execute arbitrary code without authentication by sending specially crafted HTTP requests. Security experts warn that the flaw could expose critical systems to full compromise. The vulnerability […]
Apple fixes a critical zero-day in the dyld component with the release of iOS and iPadOS 26.3 on Feb. 11, following reports of active exploitation in targeted attacks. The vulnerability, tracked as CVE-2026-20700, enables attackers with memory-write access to execute arbitrary code by corrupting dyld’s internal state. Google’s Threat Analysis Group identified the flaw, which […]
Russia tries to block WhatsApp nationwide in a move that affected over 100 million users, according to a public statement by the Meta-owned messaging platform. WhatsApp said the action is aimed at forcing users onto a Kremlin-backed alternative, which experts warn poses significant privacy risks. The disruption followed Roskomnadzor’s decision to remove WhatsApp from Russia’s […]
A 29-year-old Polish man has been formally charged in a case that has lingered for years—the Morele.net hacker charged with breaching security and exposing personal details of around 2.2 million users. The incident, which occurred in 2018, compromised sensitive data including names, email addresses, phone numbers and partial credit card information. The breach targeted Morele.net, […]
A stealthy malware known as Socelars steals Facebook Ad session data and other sensitive information from infected Windows systems, according to cybersecurity researchers. The spyware disguises itself as legitimate software, installs silently, and targets browser-stored session cookies—particularly from platforms like Facebook and Amazon. Once active, Socelars executes a three-stage attack. It first collects system details […]
Microsoft patches 6 zero-day vulnerabilities as part of its February 2026 Patch Tuesday release, addressing a total of roughly 60 security flaws across its product lineup. The company confirmed that all six zero-days had been actively exploited prior to the update rollout, underscoring the urgency for users and administrators to apply the fixes. The vulnerabilities […]
Authorities from 18 European countries intercepted around EUR 1.2 billion in counterfeit currency during a Europol postal sting that targeted illegal shipments across the continent. The joint action, known as Operation DECOY III, was led by Austria, Portugal, and Spain with support from Europol. Officials seized fake banknotes and coins intended for circulation via international […]
Thousands of serving and former Northern Ireland police officers impacted by a major data breach in 2023 are set to receive financial compensation. Each affected officer will be offered £7,500 after personal details were mistakenly made public, according to officials. The breach exposed sensitive information, raising significant concerns over safety and privacy. Authorities acted to […]
The Dutch Data Protection Authority (AP) disclosed that it fell victim to a cyberattack exploiting zero-day vulnerabilities in Ivanti products, making the agency part of a growing list affected by the incident. The dutch data watchdog hack came to light after attackers rapidly weaponized flaws identified as CVE-2026-1340 and CVE-2026-1281. These vulnerabilities impact Ivanti Connect […]
Hackers are actively exploiting SolarWinds WHD flaws to execute code on vulnerable systems and install legitimate tools for remote access. Targeting the company’s Web Help Desk application, threat actors gain execution privileges and deploy Velociraptor, a digital forensics tool designed for endpoint visibility. Security researchers linked the activity to persistence strategies, indicating an effort to […]
Chinese cyber-espionage group UNC3886 breached Singapore’s four largest telecom providers—Singtel, StarHub, M1 and Simba—at least once in 2023, raising new concerns over targeted infrastructure attacks in Southeast Asia. The UNC3886 breaches, tracked by cybersecurity analysts, reveal how state-aligned actors continue to exploit key communications networks to gain undetected access and gather sensitive data. The intrusions […]
A new scheme in which North Korea impersonates candidates on LinkedIn threatens to undermine remote hiring security. Analysts say operatives from the Democratic People’s Republic of Korea (DPRK) are now copying real professionals’ profiles rather than creating fake identities. These actors use verified emails and identity badges to pose as genuine applicants, often with the […]