Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development
Microsoft has formally disclosed a zero-day vulnerability in Microsoft Defender, codenamed RoguePlanet, and confirmed that a patch is in development. The flaw,…
Tag: CVE-2026-11645
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to promote a cryptocurrency clipboard hijacker.…
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Threat actors associated with the DragonForce ransomware group have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to…
PCI DSS v4.0.1 Now Mandates Payment Page Script Monitoring: QSA Validates Reflectiz Platform
The Payment Card Industry Data Security Standard (PCI DSS) v4.0.1 has introduced two critical requirements—6.4.3 and 11.6.1—that directly address the risk of…
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC from a nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups…
Microsoft Exposes CryptoBandits: USB LNK Worm and Tor-Based Clipper Malware Campaign
Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign codenamed CryptoBandits that has targeted users since February 2026. The malware uses…
Orphaned AI Agents: Uncovering Hidden Access Risks in Your Network
The rapid adoption of internal AI tools has created a significant security blind spot: orphaned AI agents. These are automated tools left…
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…
Apple Patches Beats Studio Buds Flaw Allowing Nearby Attackers to Spy via Microphone
Apple has released a firmware update for Beats Studio Buds wireless earbuds to address a high-severity vulnerability, CVE-2025-20701 (CVSS 8.8), that could…
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…