Microsoft
TRENDING TOPICS MAY 15, 2026 Microsoft Exchange 0-Day Under Active Attack Microsoft has confirmed that a new 0-day vulnerability in on-premises Exchange Server is already being exploited in active attacks, putting Outlook web users at immediate risk. The flaw, tracked as CVE-2026-42897, affects Exchange Server 2016, Exchange Server 2019, and
Shai-Hulud
TRENDING TOPICS MAY 13, 2026 Mini Shai-Hulud Supply Chain Attack Backdoors TanStack npm Packages With Credential-Stealing Malware A critical supply chain attack has compromised 42 legitimate @tanstack/* packages on npm, allowing attackers to push credential-stealing malware through trusted software updates. The incident, tracked as CVE-2026-45321, involved 84 malicious package versions
Trellix
TRENDING TOPICS MAY 08, 2026 RansomHouse Claims Trellix Source Code Breach, Raising New Supply Chain Concerns Trellix has confirmed that an unauthorized party gained access to a portion of its source code repository. The RansomHouse extortion group has publicly claimed responsibility for the intrusion. The company says it is investigating
PAN-OS
TRENDING TOPICS MAY 06, 2026 Critical PAN-OS Zero-Day CVE-2026-0300 Exposes Palo Alto Firewalls to Root-Level Takeover Palo Alto Networks is warning customers about CVE-2026-0300, a critical PAN-OS zero-day already being exploited in the wild that allows unauthenticated attackers to execute arbitrary code with root privileges on affected firewalls. The vulnerability
TLP: WHITE Audience: Human Resources Leadership Prepared by: Threat Intelligence 01 May 2026 Threat Intelligence Brief For Internal Distribution DPRK Insider Threat Series North Korea's Fake IT Worker Infiltration Campaign What HR needs to know about the most sophisticated hiring fraud operation in the world and how to
CVE-2026-31431
TRENDING TOPICS MAY 01, 2026 Copy Fail Vulnerability Turns Any Local Linux User into Root in Seconds A nine‑year‑old logic bug in the Linux kernel, now tracked as CVE‑2026‑31431 and nicknamed Copy Fail, has emerged as one of the most reliable paths to privilege escalation on
CVE-20265-32202
TRENDING TOPICS APR 29, 2026 CISA Flags New Windows Shell Zero‑Day Under Active Exploitation CISA has issued an urgent alert about a newly identified Windows Shell zero‑day that attackers are actively exploiting, adding the flaw to its KEV catalog and putting federal agencies on a short deadline to
TRENDING TOPICS APR 24, 2026 Entra ID “Agent IDs” Show How Quiet Admin Roles Become Prime Targets Recent research into Microsoft Entra ID has highlighted that attackers increasingly target service identities and mid-tier admin roles, not just classic Global Administrator accounts. By compromising identities that sit behind “trusted” first‑party
ASP.NET
TRENDING TOPICS APR 22, 2026 ASP NET Core Critical Vulnerability: When Request Smuggling Becomes a Security Feature Bypass Microsoft has patched a maximum-severity vulnerability in ASP[.]NET Core, an open-source web development framework | .NET Core, tracked as CVE‑2025‑55315, that allows HTTP request smuggling via the built-in Kestrel web
Shouting into the IT void
TRENDING TOPICS APR 17, 2026 CISA Sounds the Alarm on Apache ActiveMQ: A 13‑Year‑Old RCE Bug Is Now Being Actively Exploited CISA has added CVE‑2026‑34197 to its KEV catalog after confirming that attackers are actively exploiting this high‑severity remote code execution flaw in Apache ActiveMQ
TRENDING TOPICS APR 15, 2026 HanGhost Loader Targets the People Who Move Money and Goods, Not Just IT A new HanGhost loader campaign is quietly going after corporate staff who sit closest to payments, logistics, and contract workflows, using a multi‑stage, largely fileless attack chain that most SOCs only
TRENDING TOPICS APR 10, 2026 UNC6783’s Okta Phishing Playbook: When Your BPO Helpdesk Becomes the Front Door Google’s Threat Intelligence Group is tracking a new data‑theft extortion crew, UNC6783, that breaks into large enterprises by first compromising their business process outsourcers (BPOs), the third‑party support and
TRENDING TOPICS APR 08, 2026 Docker’s Silent AuthZ Failure: CVE‑2026‑34040 Turns One Oversized Request into Full Host Takeover A newly disclosed high‑severity flaw in Docker Engine, tracked as CVE‑2026‑34040 (CVSS 8.8), allows attackers to bypass authorization plugins and gain full control of the
A practitioner's guide to patterns, pitfalls, and reusable approaches for GovCloud and classified environments Daniel Beller | Director of Cloud Solutions, Hunter Strategy 23 years supporting DoD and IC in systems and cloud engineering, architecture, and security - both practical and compliance Why Multi-Region? The Case and the Caveats
TRENDING TOPICS APR 03, 2026 SparkCat’s Comeback: Stealthy Mobile Wallet Stealer Hiding in “Normal” Apps Researchers have uncovered a new SparkCat malware variant lurking in seemingly legitimate iOS and Android apps, including enterprise messengers and food delivery services, on both the Apple App Store and Google Play. The trojan
TRENDING TOPICS APR 01, 2026 How Iran’s Threats Turn Tech Infrastructure into a Warfront Iran’s threat to attack facilities of major U.S. tech and finance firms in the Middle East, including Apple, Google, Microsoft, Nvidia, Meta, IBM, Oracle, Tesla, Boeing, JPMorgan, and others, marks a clear shift
TRENDING TOPICS MAR 27, 2026 Coruna iOS Exploit Kit Revives and Upgrades Operation Triangulation Framework Coruna is a newly exposed, nation-state-grade iOS exploit kit that researchers now assess as a direct evolution of the framework used in the 2023 Operation Triangulation espionage campaign. Analysis by Kaspersky’s Global Research and
TRENDING TOPICS MAR 26, 2026 Torg Grabber Infostealer Campaign: Broad-Spectrum Credential and Crypto Theft A rapidly evolving infostealer malware campaign centered on “Torg Grabber” is targeting a wide range of sensitive data sources, with a particular emphasis on cryptocurrency wallets and browser-based credentials. The malware is distributed through ClickFix-style social
TRENDING TOPICS MAR 25, 2026 NGINX MP4 Module Flaw Enables Remote Code Execution F5 has disclosed a high-severity vulnerability, tracked as CVE-2026-32647, in the NGINX MP4 streaming module that can be abused with crafted MP4 files to crash worker processes or, in some circumstances, execute arbitrary code on affected servers.
TRENDING TOPICS MAR 24, 2026 TeamPCP Deploys Iran-Targeted Wiper in Kubernetes Attacks A newly observed campaign by TeamPCP is targeting Kubernetes clusters with a destructive malware variant that selectively wipes systems configured for Iran while maintaining persistence elsewhere. The operation builds directly on the earlier CanisterWorm activity, reusing the same
TRENDING TOPICS MAR 23, 2026 Critical QNAP QVR Pro Flaw Opens Door to Remote Intrusion QNAP has issued an urgent security advisory for CVE-2026-22898, a critical vulnerability in its QVR Pro network video surveillance platform that allows remote attackers to gain system access without authentication. Tracked as ZDI-CAN-28327 and tied
