WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
A new active campaign is targeting WhatsApp Desktop and WhatsApp Web users across multiple countries, including Malaysia, Brazil, India, Mexico, Singapore, the…
Tag: CVE-2026-11645
Malicious npm Packages Disguised as PostCSS Tools Deploy Windows RAT
Cybersecurity researchers at JFrog have uncovered a set of malicious npm packages that masquerade as legitimate PostCSS tools to deliver a Windows-based…
Agentic AI: The Weapon That No Longer Needs a Warrior
Agentic AI represents a paradigm shift in offensive cybersecurity, where AI tools no longer require human operators to execute attacks. Unlike previous…
GitHub actions/checkout Update Blocks Pwn Request Attacks in CI/CD Pipelines
GitHub has announced a critical security update to its official actions/checkout action, effective June 18, 2026, designed to block common pwn request…
Trump Executive Order Sets 2030 Deadline for Federal Post-Quantum Cryptography Migration
President Trump signed Executive Order 14409 on June 22, 2026, establishing hard deadlines for federal agencies to migrate high-value assets and high-impact…
Fake AI Agent Skill Bypasses Security Scans, Reaches 26,000 Agents in Supply Chain Attack Demo
Security firm AIR demonstrated a critical supply chain vulnerability in AI agent ecosystems by creating a fake skill named 'brand-landingpage' that bypassed…
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
DoJ Seizes Huione Cloud Account in Crackdown on Cyber Scam Money Laundering
The U.S. Department of Justice (DoJ) announced the seizure of a cloud computing account used by subsidiaries of the Cambodia-based HuiOne Group,…
Dawn of the Apex Agentic Adversary: AI-Driven Threats Compress Attack Timelines
The cybersecurity landscape is entering a new era where AI-powered agentic adversaries compress the time between vulnerability discovery and weaponization to near-instantaneous…