SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Unknown threat actors are leveraging the ScreenConnect remote access tool to deploy and execute AsyncRAT as part of a massive, multi-domain, multi-language…
Tag: CVE-2026-20245
VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer
Cybersecurity researchers have identified a new multi-stage malware delivery attack chain, dubbed VEIL#DROP, that leverages social engineering and Google's Blogger platform to…
Adobe Patches 7 Critical CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe has released critical security updates addressing multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic. The patches fix seven CVSS…
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is targeting Windows users in Spain and Portugal, using phishing PDFs disguised as corrupted files. Discovered…
Progress Kemp LoadMaster CVE-2026-8037 Under Active Exploitation
A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 (CVSS 9.6), is now facing active exploitation attempts.…
Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining 'unrealistic browser-malware concepts with…
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Microsoft has announced an acceleration of its quantum-safe security roadmap, moving the target for transitioning critical products and services to post-quantum cryptography…
2026 Cybersecurity Assessment Reveals Gap Between Awareness and Resilience
The 2026 Bitdefender Cybersecurity Assessment, based on a survey of 1,200 IT and cybersecurity professionals across six countries, reveals a significant gap…
Phantom Squatting: AI-Hallucinated Domains Used for Phishing and Malware Attacks
Palo Alto Networks' Unit 42 has identified a new attack vector called 'phantom squatting,' where threat actors register AI-hallucinated domains that do…