WatchGuard has rolled out critical security updates after identifying two vulnerabilities that could be exploited by attackers to elevate privileges on Windows systems or extract sensitive credentials. The company’s latest advisory comes as part of broader efforts to strengthen its network defenses, with the fixes addressing flaws discovered in its VPN and Firebox appliances. The […]
A new cyber campaign is leveraging the facebook ads feed to deceive users and funnel them into a convincing tech support scam. Researchers at Gen Threat Labs have uncovered a three-step malvertising chain that begins when a user clicks a sponsored ad on Facebook. Instead of reaching a legitimate site, they’re rerouted to a fake […]
Threat actors are exploiting NGINX server configurations to redirect web traffic to attacker-controlled destinations in a new, covert campaign. The attackers, linked to previous React2Shell exploits, are now focusing on servers using the Baota panel, a popular management tool in Asian markets. Rather than deploying traditional malware, they inject malicious directives into NGINX location blocks. […]
Cybersecurity firm Truesec flags the OpDenmark campaign as a growing digital threat after a Russian-linked group, the Russian Legion, warned of a large-scale cyberattack targeting Denmark. The warning surfaced as regional tensions continue to escalate across Europe, raising concerns among public and private sector entities. Truesec identified coordinated activity that appears to be part of […]
A new investigation into the Moltbook network exposes data vulnerabilities and raises alarm over prompt injection risks between AI agents. Researchers from Wiz and Permiso analyzed the AI-driven social platform and discovered multiple security flaws. These include bot-to-bot prompt injection attacks, where one agent can manipulate another’s behavior using crafted text prompts, and unintentional data […]
Russian state hackers began exploiting a newly disclosed Microsoft Office vulnerability to target systems in Ukraine and the European Union, according to Ukraine’s cybersecurity agency. The country’s Computer Emergency Response Team, CERT-UA, reported that attackers moved quickly after Microsoft revealed the flaw, tracked as CVE-2026-21509, in early January. The vulnerability affects how Microsoft Office applications […]
Poland detains a defense official on allegations of spying for Russia, authorities said, in a move that intensifies tensions between Warsaw and Moscow. The suspect, a 60-year-old Polish citizen, worked in the Ministry of National Defense’s strategy and planning department. He was involved in military modernization projects, according to government officials. Authorities arrested the man […]
A newly disclosed vulnerability in multiple Hikvision wireless access point models poses a high-severity risk to enterprise networks. The Hikvision AP flaw, tracked as CVE-2026-0709, allows attackers with valid credentials to execute arbitrary commands due to weak input validation within the WAP firmware. The vulnerability carries a CVSS v3.1 base score of 7.2. This flaw […]
A newly formed hacker coalition known as the Russian Legion has launched a coordinated cyberattack campaign against Denmark, targeting key sectors and government websites. The group, comprising Cardinal, The White Pulse, Russian Partizan, and Inteid, announced its formation on Jan. 27, 2026. Within 24 hours, it issued an ultimatum demanding that Denmark cancel a 1.5 […]
A malicious Google Play app disguised as a document reader has infected over 50,000 Android devices with a powerful banking trojan known as Anatsa. Security researchers at Zscaler ThreatLabz uncovered the app, which initially appeared legitimate but functioned as an installer for the malware. Once downloaded, Anatsa gained elevated permissions and deployed its full payload, […]
Russian-backed hackers from APT28 are exploiting a newly discovered Microsoft Office zero-day vulnerability, according to Ukraine’s CERT. The agency warned that APT28 exploits Microsoft Office through this flaw, moving from public disclosure to active use within days. The speed of the exploitation underscores the growing efficiency of targeted cyber threats. Security researchers say attackers are […]
A newly surfaced report raises alarm over two AI assistants widely used by software developers, revealing they quietly transmit all processed code to China. These coding tools, employed by approximately 1.5 million developers globally, may compromise sensitive data by sending it outside user control without consent or transparency. The covert transfer of proprietary or confidential […]